(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c00030009000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2097.876107] Module has invalid ELF structures [ 2097.888615] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2097.912862] Module has invalid ELF structures 10:04:23 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2097.965597] Module has invalid ELF structures 10:04:23 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:23 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2097.993645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2097.995348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:04:23 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2097.998939] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:04:23 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:23 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c00030009000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:04:23 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:04:23 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2098.151237] Module has invalid ELF structures 10:04:23 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xac}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_NOP={0x0, 0x3}, 0x7) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f00000001c0)='./file1\x00', 0x4, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="2cbe3bb176249c90ab0d93e448809bfdae637f0309b2b964da79bb40aea50c988769fbeabbc3499ad1ab4690e9c1cb3f3c083cd062be4bd0d872db2e05376e88ebf25a4f5fd4ea423816c68a89c0b06caf90a0177ed07f20746a8b12f9542822d32959ed07ddabf4b0dcbdfa1914a2b1a401d5146b174104de5a6b079fa5025dd76edc3dd79c734286bfd45eea8c57b954f6c2efdb72b8539d95c4dbee69b0e57d0099ea1785a678c8ecee5de74e4b09425514bf576d3d24c4c60f956af928a704e735c842e126d3e14d792cba966154754801472db690da89b8615f4a238284266be76ad12a7b28ee4969d74f3f5abef570", 0xf2, 0x7}], 0x4a001, &(0x7f0000000340)={[{@bsdgroups}, {@quota}]}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r5}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:04:23 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:23 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2098.284269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2098.299143] Module has invalid ELF structures [ 2098.324966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2098.326624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2098.333157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2098.395037] Module has invalid ELF structures 10:04:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:37 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:37 executing program 3: perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x418000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x50, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:04:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:04:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:37 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:04:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:37 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2111.921474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2111.939407] Module has invalid ELF structures [ 2111.956899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2111.958462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2111.961644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:04:37 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2111.977372] Module has invalid ELF structures 10:04:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:37 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:04:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:37 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:37 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x1080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r2 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001e0075b90000000000000000fc0100000000000000000000000000000000000000000000fe800000000000000000000000000000000000000000000024000900ed85a600dd8cfbd565bca8bb9305a4f600"/112], 0x70}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) ptrace$getregset(0x4204, 0x0, 0x200, &(0x7f0000000140)={&(0x7f0000002a80)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x12, 0x0, r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r1, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r6}}, 0x3) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/8, 0x8}, {&(0x7f00000001c0)=""/185, 0xb9}, {&(0x7f0000000280)=""/252, 0xfc}, {&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000380)=""/7, 0x7}], 0x5, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:04:37 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2112.150805] Module has invalid ELF structures 10:04:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2112.162459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2112.180630] Module has invalid ELF structures 10:04:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2112.211948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2112.213707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2112.215737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2112.247067] Module has invalid ELF structures 10:04:37 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2112.287902] Module has invalid ELF structures [ 2112.298423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:04:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:04:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2112.365295] Module has invalid ELF structures [ 2112.365483] Module has invalid ELF structures 10:04:37 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2112.399918] Module has invalid ELF structures [ 2112.414780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:04:37 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:04:37 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2112.488200] Module has invalid ELF structures 10:04:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2112.534967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2112.577910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2112.579782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2112.582493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:04:51 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000700)) 10:04:51 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:04:51 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:51 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:04:51 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000009c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x12, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000380)={&(0x7f0000000600)=""/236, 0xec}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="65727370616e30e1ff00000000000000", @ANYRES32=r3, @ANYBLOB="004080000000000000000235490200a40064000020299078ac141411640101010044145171ffffffff00000000ac1414bb000000064434ff63ac1e0101ffffffffe000000100000008ffffffff0000000300000000000000a8ffffffff000008bae00000020000ffff830b8c7f000001ac1e010194040100442426e3ac1414bb00000009e00000020000005300000000000000040a0101017fffffff0713c8ffffffffac1414370a0101027f00000100"]}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) readv(r5, &(0x7f0000000900)=[{&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000700)=""/174, 0xae}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/11, 0xb}], 0x8) 10:04:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2125.766217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2125.774630] Module has invalid ELF structures [ 2125.778922] Module has invalid ELF structures [ 2125.781142] Module has invalid ELF structures [ 2125.782557] Module has invalid ELF structures [ 2125.833154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2125.834486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2125.835692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2125.856165] Module has invalid ELF structures 10:05:08 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000700)) 10:05:08 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:05:08 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:08 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:08 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:08 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:05:08 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:08 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2143.528356] Module has invalid ELF structures [ 2143.535475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2143.546052] Module has invalid ELF structures [ 2143.551119] Module has invalid ELF structures 10:05:09 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:09 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000700)) [ 2143.601451] cgroup: fork rejected by pids controller in /syz4 [ 2143.611118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2143.612493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2143.614779] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:05:09 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2143.633934] Module has invalid ELF structures 10:05:09 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2143.742668] Module has invalid ELF structures 10:05:09 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2143.777147] Module has invalid ELF structures 10:05:09 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2143.818183] Module has invalid ELF structures [ 2143.858111] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2143.875862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2143.877209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2143.880554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2143.986606] Module has invalid ELF structures 10:05:27 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:27 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) 10:05:27 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:27 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:05:27 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:27 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 10:05:27 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2162.169594] Module has invalid ELF structures [ 2162.182777] Module has invalid ELF structures [ 2162.187549] Module has invalid ELF structures [ 2162.212399] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2162.221867] Module has invalid ELF structures 10:05:27 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) 10:05:27 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:27 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 10:05:27 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2162.282479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2162.284009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2162.286810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:05:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2162.301811] Module has invalid ELF structures 10:05:27 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:05:27 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x5, 0x833, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/99, 0x63}], 0x1, 0x0, 0x0, {0x0, r3}}, 0x5) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:05:27 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, 0x0, 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2162.464679] Module has invalid ELF structures [ 2162.467072] Module has invalid ELF structures 10:05:27 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2162.498090] Module has invalid ELF structures [ 2162.519124] Module has invalid ELF structures 10:05:27 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) [ 2162.557349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:05:28 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2162.626734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2162.628624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2162.632773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2162.655066] Module has invalid ELF structures [ 2162.694623] Module has invalid ELF structures [ 2162.739781] Module has invalid ELF structures 10:05:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:41 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:41 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x4004, @fd_index=0x3, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x9) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) openat(r6, &(0x7f00000000c0)='./file1\x00', 0x80000, 0x122) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r7}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:05:41 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x0) 10:05:41 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, 0x0, 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:41 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:05:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 10:05:41 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2176.299006] Module has invalid ELF structures [ 2176.312124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2176.328009] Module has invalid ELF structures 10:05:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2176.340021] Module has invalid ELF structures [ 2176.363597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2176.365012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2176.367544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2176.385734] Module has invalid ELF structures 10:05:41 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x0) [ 2176.393661] Module has invalid ELF structures 10:05:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 10:05:41 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2176.451567] Module has invalid ELF structures 10:05:41 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6c", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:05:41 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:41 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, 0x0, 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2176.520005] Module has invalid ELF structures 10:05:41 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x20, &(0x7f0000000100)={0x0, 0x0, 0x20}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000ec0)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000013c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd, 0x0, 0xf8, 0x80000001, 0xa, 0x1, {0x3, r3}}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r0, &(0x7f0000002480)={0x50000007}, r4, 0x1, 0x0, 0x0, {0x0, r3}}, 0x5) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000200)='./file1/file0\x00', 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r5}}, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f000000c880)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000000500)=""/137, 0x89}, {&(0x7f00000005c0)=""/244, 0xf4}], 0x6}, 0x10001}, {{&(0x7f00000006c0)=@phonet, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000740)=""/199, 0xc7}, {&(0x7f0000000840)=""/105, 0x69}, {&(0x7f00000008c0)=""/221, 0xdd}, {&(0x7f00000009c0)=""/87, 0x57}, {&(0x7f0000000a40)=""/172, 0xac}, {&(0x7f0000000b00)=""/169, 0xa9}, {&(0x7f0000000bc0)=""/254, 0xfe}, {&(0x7f0000000440)=""/5, 0x5}, {&(0x7f0000000cc0)=""/131, 0x83}], 0x9, &(0x7f0000002280)=""/186, 0xba}, 0x2d40}, {{&(0x7f0000000f00)=@can, 0xb0, &(0x7f0000001080)=[{&(0x7f0000000f80)=""/87, 0x57}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000001000)=""/72, 0x48}], 0x3, &(0x7f0000002800)=""/196, 0xc4}, 0x3}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f00000010c0)=""/5, 0x5}, {&(0x7f0000002380)=""/57, 0x39}, {&(0x7f0000002140)=""/146, 0x92}, {&(0x7f0000002480)}], 0x4}, 0x7fffffff}, {{&(0x7f0000002500)=@caif=@util, 0x80, &(0x7f0000002740)=[{&(0x7f0000000e40)=""/91, 0x5b}, {&(0x7f0000002600)}, {&(0x7f0000002640)=""/92, 0x5c}, {&(0x7f00000026c0)=""/16, 0x10}, {&(0x7f000000cc40)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/4096, 0x1000}, {&(0x7f0000002600)=""/20, 0x14}, {&(0x7f0000006a80)=""/4096, 0x1000}, {&(0x7f0000007a80)=""/4096, 0x1000}], 0xa, &(0x7f000000cb40)=""/209, 0xd1}, 0x4}, {{0x0, 0x0, &(0x7f0000008b00)=[{&(0x7f0000002900)=""/247, 0xf7}, {&(0x7f0000008a80)=""/102, 0x66}, {&(0x7f0000002a00)=""/47, 0x2f}], 0x3, &(0x7f0000008b40)=""/128, 0x80}, 0x1}, {{&(0x7f0000008bc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000008f40)=[{&(0x7f0000008c40)=""/155, 0x9b}, {&(0x7f0000008d00)=""/228, 0xe4}, {&(0x7f0000008e00)=""/28, 0x1c}, {&(0x7f0000008e40)=""/144, 0x90}, {&(0x7f0000008f00)=""/7, 0x7}], 0x5}, 0x58e}, {{&(0x7f0000008fc0)=@can, 0x80, &(0x7f000000a140)=[{&(0x7f0000009040)=""/4086, 0xff6}, {&(0x7f000000a040)=""/168, 0xa8}, {&(0x7f000000a100)=""/47, 0x2f}], 0x3, &(0x7f000000a180)=""/4096, 0x1000}, 0x3}, {{&(0x7f000000b180)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, 0x80, &(0x7f000000c380)=[{&(0x7f000000b200)=""/4096, 0x1000}, {&(0x7f000000c200)=""/222, 0xde}, {&(0x7f000000c300)=""/119, 0x77}], 0x3, &(0x7f000000c3c0)=""/119, 0x77}, 0xb0}, {{0x0, 0x0, &(0x7f000000c780)=[{&(0x7f000000c440)=""/134, 0x86}, {&(0x7f000000c500)=""/168, 0xa8}, {&(0x7f0000002700)=""/13, 0xd}, {&(0x7f000000c600)=""/18, 0x12}, {&(0x7f000000c640)=""/46, 0x2e}, {&(0x7f000000c680)=""/12, 0xc}, {&(0x7f000000c6c0)=""/169, 0xa9}], 0x7, &(0x7f000000c800)=""/86, 0x56}, 0x4}], 0xa, 0x40002040, &(0x7f000000cb00)={0x77359400}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2176.580825] Module has invalid ELF structures [ 2176.602871] Module has invalid ELF structures [ 2176.655665] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2176.698191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2176.699480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2176.700991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2176.773726] Module has invalid ELF structures [ 2176.784662] Module has invalid ELF structures 10:05:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:58 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) r1 = fspick(0xffffffffffffffff, 0x0, 0x1) r2 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x400000a2, 0x0, {0x1}}, 0x590) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x12, 0x0, r5) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002a80)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8f, "85645be1fcf5e3"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000001c0)=ANY=[@ANYRES64=r6, @ANYBLOB="0100004000000000000003000000000000001f00000000000000f8ffffffffffffff00000080080000000100000003000000f9fffffffffffffff214ec4600000000010000000000000001000000000000000800"/98]) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r7}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r1, 0x1, 0x2) 10:05:58 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6c", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:05:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x0) 10:05:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x0) 10:05:58 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:58 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2192.722458] Module has invalid ELF structures [ 2192.792500] Module has invalid ELF structures [ 2192.795704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2192.795744] Module has invalid ELF structures [ 2192.799046] Module has invalid ELF structures 10:05:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2192.859376] Module has invalid ELF structures 10:05:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x0) [ 2192.862088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2192.863780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2192.865600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2192.967486] Module has invalid ELF structures 10:05:58 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:05:58 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x9, 0x9, 0xff, 0x1c, 0x0, 0x7fff, 0x40000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc45, 0x4, @perf_bp={&(0x7f00000001c0), 0x3}, 0x4, 0x3, 0x0, 0x3, 0xffff, 0x5, 0x81, 0x0, 0x5e3, 0x0, 0xe6a}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) pipe(&(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:05:58 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6c", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2193.060527] Module has invalid ELF structures [ 2193.066878] Module has invalid ELF structures [ 2193.088239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2193.138781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2193.140497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2193.142071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:06:13 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e17", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:06:13 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x9, 0x9, 0xff, 0x1c, 0x0, 0x7fff, 0x40000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc45, 0x4, @perf_bp={&(0x7f00000001c0), 0x3}, 0x4, 0x3, 0x0, 0x3, 0xffff, 0x5, 0x81, 0x0, 0x5e3, 0x0, 0xe6a}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) pipe(&(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:06:13 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:13 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:13 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$bind(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x6110404, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:06:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x0) 10:06:13 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2208.515437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2208.522830] Module has invalid ELF structures 10:06:13 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2208.583618] Module has invalid ELF structures [ 2208.587909] Module has invalid ELF structures [ 2208.601186] Module has invalid ELF structures [ 2208.609392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2208.611093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2208.614877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2208.616137] Module has invalid ELF structures 10:06:14 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:14 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e17", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:06:14 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:14 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:14 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:14 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x9, 0x9, 0xff, 0x1c, 0x0, 0x7fff, 0x40000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc45, 0x4, @perf_bp={&(0x7f00000001c0), 0x3}, 0x4, 0x3, 0x0, 0x3, 0xffff, 0x5, 0x81, 0x0, 0x5e3, 0x0, 0xe6a}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) pipe(&(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2208.774785] Module has invalid ELF structures 10:06:14 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:14 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x3, 0x8, 0x5, 0x7e, 0x0, 0x2, 0x4002c, 0xe, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000240), 0x8}, 0x9003, 0x2, 0x4, 0x5, 0x1ff, 0xffffffff, 0x1, 0x0, 0x8, 0x0, 0x100000001}, 0x0, 0x6, r0, 0x8) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x200800, 0x20) pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r2 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x9, 0x9, 0x1, 0x1f}, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r1, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2208.867785] Module has invalid ELF structures [ 2208.914917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2208.950830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2208.952664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2208.955830] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2208.969191] Module has invalid ELF structures 10:06:14 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2209.010096] Module has invalid ELF structures [ 2209.023003] Module has invalid ELF structures 10:06:14 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2209.087849] Module has invalid ELF structures 10:06:14 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e17", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:06:14 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2209.206558] Module has invalid ELF structures [ 2209.213089] Module has invalid ELF structures [ 2209.312334] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2209.334162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2209.335923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2209.339524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2209.363504] Module has invalid ELF structures 10:06:28 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:28 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x3, 0x8, 0x5, 0x7e, 0x0, 0x2, 0x4002c, 0xe, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000240), 0x8}, 0x9003, 0x2, 0x4, 0x5, 0x1ff, 0xffffffff, 0x1, 0x0, 0x8, 0x0, 0x100000001}, 0x0, 0x6, r0, 0x8) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x200800, 0x20) pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r2 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x9, 0x9, 0x1, 0x1f}, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r1, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:06:28 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:28 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:06:28 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:28 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:28 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder-control\x00', 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r6}}, 0x1) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r7}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:06:28 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(0x0, 0x0) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2223.426010] Module has invalid ELF structures 10:06:28 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2223.437531] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2223.455485] Module has invalid ELF structures 10:06:28 executing program 7: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) [ 2223.487689] Module has invalid ELF structures [ 2223.496569] Module has invalid ELF structures [ 2223.502675] Module has invalid ELF structures [ 2223.521572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2223.523176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2223.525897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:06:28 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(0x0, 0x0) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:29 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2223.599603] Module has invalid ELF structures 10:06:29 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) openat(r0, &(0x7f0000000380)='./file1\x00', 0x400001, 0x104) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) preadv(r4, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f0000000380)}], 0x4, 0x8, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r5}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:06:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x0, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:29 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2223.717873] Module has invalid ELF structures [ 2223.766585] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2223.790543] Module has invalid ELF structures [ 2223.804071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2223.805796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2223.808936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2223.841021] Module has invalid ELF structures [ 2223.855891] Module has invalid ELF structures 10:06:44 executing program 1: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) 10:06:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x0, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:44 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) mount$9p_unix(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x20, &(0x7f0000000240)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x9}}, {@mmap}, {@cache_none}, {@access_any}], [{@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x85}}, {@appraise_type}, {@audit}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, 'smaps\x00'}}, {@euid_gt}, {@measure}]}}) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x1) 10:06:44 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(0x0, 0x0) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:44 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:44 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:06:44 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:06:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2239.121225] Module has invalid ELF structures [ 2239.123855] Module has invalid ELF structures [ 2239.126893] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2239.138743] Module has invalid ELF structures [ 2239.202078] Module has invalid ELF structures [ 2239.228213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2239.230305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2239.232357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2239.246086] Module has invalid ELF structures 10:07:01 executing program 1: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) 10:07:01 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:01 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:07:01 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:01 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x0, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:01 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:07:01 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2256.490949] Module has invalid ELF structures [ 2256.509757] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:07:01 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2256.608003] Module has invalid ELF structures [ 2256.616636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2256.618503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2256.621782] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:07:02 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r2 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x12, 0x0, r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r1, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pwritev(r0, &(0x7f00000000c0), 0x0, 0x7, 0x13c) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r5}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:07:02 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:02 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:02 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:07:02 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:02 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2256.902721] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2256.939192] Module has invalid ELF structures 10:07:02 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2256.982301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2256.984137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2256.986089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2256.999607] Module has invalid ELF structures [ 2257.193829] Module has invalid ELF structures 10:07:19 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) fadvise64(r4, 0x8, 0x4, 0x5) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r5}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:07:19 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:07:19 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:19 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:19 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$inet6_opts(r4, 0x29, 0x1, 0x0, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) io_uring_enter(r0, 0x78a3, 0xb73c, 0x2, &(0x7f00000000c0)={[0x6]}, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r5}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:07:19 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x0) [ 2274.349319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2274.370933] Module has invalid ELF structures [ 2274.385625] Module has invalid ELF structures [ 2274.402537] Module has invalid ELF structures 10:07:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:19 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x0) [ 2274.443731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2274.445432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2274.447276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:07:19 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:19 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:19 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:07:19 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2274.591444] Module has invalid ELF structures 10:07:20 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001e0075b90000000000000080fc0100000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000002400090000000000000000000000000000000000000000000000000000000000000000000c0015000000000000000000"], 0x70}}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="761507d94d736fac29c09e7979fc93337904130782da42aad9a74773cbad467a9000b125f25bbfdbca1ebae6b2a721b342f5a2a55485bef2ff3146bbc41b8d4219876054941866c0a2adbfd6ab5597d95b8950ed3ced4c7612149b89362634c18d9d456afd0fd8a8409be9309c370f013da624e0742523e922ad13dd9b01c2d5be5ef8a7a6ed5a6d6694bc30ab462b304291c6d4b4b880943b378546e0", 0x9d}, {&(0x7f0000000280)="3d8d39df5655314a7628ddfe8584413d7c0f2e8f397d09f5ade96fd5f2a925f058fb92a4de18ae82a8ed8a8d9c28b59b57976f38104a9999a4ba10594ce8a7fa1fe11e92dfd956ad4d66d326a0b513326c21bd93028f9e37f31cda5770cad05cf85fb325cba4003b1d", 0x69}], 0x2, &(0x7f0000000500)=[{0xf0, 0x109, 0x4, "91217f1bca24f08c194ed0838331b185630349bf0f5cc2670908c24fb040cd66ec9cbd144680523c8dc43af93b677deff4f6baa5d1ac339934de238f2650016339e47b15baa432b3afef54cc5d4afa77a76af0860d45896493fa648f71548394d043dba6d5bf1c9d88568ed726e6a4419c5bc414274965e2aa05539d72e4c9770f5a13aebcc89bda17be8a8583255b555b2095c0529f9faca58ed8ddd7e5dddf292967bf4b727bf2fdef5785c8fe2f8d0e17adcb4795fe306b3f4c5eae35b2bb9df7b0c034d25463d9ac3eba65ddcb693cf1b7a53e0dd42d55e8d45bac4a"}, {0x40, 0x118, 0x2, "70197ef52b6714be2b4a5682363f5d8b06c9ff9cdd932af8e685effda79fb18cc9793936a6e0918d10234827d2"}, {0x108, 0x10a, 0x7, "0e8c1a620588ec09efac8c62386dd16a53fa3cdcca300861b7150a898637abf32a6973c3710f62a51a8f34a1c5e729f467d3e0253c22801138f9d9f3cfde23fa16b563b0436f9b62958c88663d50ca4b317c7a6b63349c8d0ad0eb64f225c38db3f207fd2f37b208d285671d33b47347da73bf12a7cc6d35314a89c6d46e322c1d48d5f4b6886ac550f0e7a98bf33a967c653d24527731c5c1a9e397c006299e440554230c28038b6df1df197f941b3d058f1a954cfe77293cec1f34d49792750e3b039f1911aabbe75d1a90f16bed28ac8564e41eb4d934c65829e9837c5fc59140bbabd97b8f727a8b44c866282011a86fb62b2a26b5de"}, {0x68, 0xff, 0x4f, "d821f0bccddce9f01525880db6a18fa9013d7b08e3461d56329465301e79c5e0dc064e46cf3f58bb3eea6c9ab270ab5254938f7e703f7fc1ba13b7ac7799856589406b402094bc40fcd7a172aa5783ca9de0"}, {0xd8, 0x113, 0x0, "8798f96a6059ef415eb6048499d14852b303f46a3714b3c7c377b71bcd22083fa5256d36b911bcf44376d3ed59cfd3c29e72cc69c5f963109b0f0d8532e28111bd620a7ec0ae3b46ec0a0ec641c559c71029cecc32673cb148358cba303e1ea1c02aea6ff16c94387cdc8cccda63706f4df318e3c942786a0659d80d8de0c373f1abb4f2f33662a47b5b565954c2c8bd73c7f37648d02b4fa74ce0a8a21367db77853b20671cdd5a1d65554cee49a082c0ee3d9f856b2b4f51d88c17612ea47e391eb64e"}], 0x378}, 0x0, 0x4084, 0x1, {0x0, r4}}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1}, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, r0, 0x0) syz_io_uring_submit(r6, r3, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) 10:07:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x0, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2274.667138] Module has invalid ELF structures [ 2274.680714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:07:20 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2274.691735] Module has invalid ELF structures [ 2274.693601] Module has invalid ELF structures 10:07:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:20 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2274.743027] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2274.755957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2274.757669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2274.759497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2274.781895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2274.783841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:07:20 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x0) [ 2274.786531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:07:20 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:07:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2274.831562] Module has invalid ELF structures [ 2274.865095] Module has invalid ELF structures 10:07:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x0, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2274.930896] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2274.975659] Module has invalid ELF structures 10:07:20 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2275.008574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2275.010361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2275.012148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2275.015714] Module has invalid ELF structures [ 2275.031779] Module has invalid ELF structures 10:07:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2275.083946] Module has invalid ELF structures [ 2275.089284] Module has invalid ELF structures 10:07:20 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:07:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:20 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:20 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:07:20 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(0x0, 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2275.290269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2275.298005] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2275.300504] Module has invalid ELF structures [ 2275.312260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2275.313076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2275.314323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2275.321179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2275.322678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2275.324352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2275.340730] Module has invalid ELF structures 10:07:35 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:35 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x2007, @fd, 0x1, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r5}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4102, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 10:07:35 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x0, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:35 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(0x0, 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:35 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:35 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:35 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x2, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:07:35 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2289.973561] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2289.990837] Module has invalid ELF structures 10:07:35 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x680a) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:07:35 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(0x0, 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2290.029637] Module has invalid ELF structures [ 2290.031363] Module has invalid ELF structures [ 2290.033780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2290.034631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2290.035696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:07:35 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:35 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:07:35 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2290.250537] Module has invalid ELF structures [ 2290.294177] Module has invalid ELF structures [ 2290.302971] Module has invalid ELF structures 10:07:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6807) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:07:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:07:51 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:51 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x1, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file1', './file1'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r5}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:07:51 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x2, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:07:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:07:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:51 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x0, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2305.796818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:07:51 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2305.841644] Module has invalid ELF structures [ 2305.847739] Module has invalid ELF structures 10:07:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2305.870138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2305.871748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2305.875535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:07:51 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x0, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:07:51 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x2, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:07:51 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2306.107933] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2306.109742] Module has invalid ELF structures [ 2306.116381] Module has invalid ELF structures [ 2306.172751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2306.174372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2306.177673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2306.254516] Module has invalid ELF structures 10:08:06 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:08:06 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x6f23, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:08:06 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {0x0}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:08:06 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:08:06 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:08:06 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:06 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:06 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x0, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2320.683086] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2320.695808] Module has invalid ELF structures [ 2320.725194] Module has invalid ELF structures [ 2320.736506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2320.737869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2320.739984] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2320.741964] Module has invalid ELF structures [ 2320.743627] Module has invalid ELF structures [ 2320.761878] Module has invalid ELF structures 10:08:20 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:08:20 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:20 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r2 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x12, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'}) sendfile(r5, r1, 0x0, 0x7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r1, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r6}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:08:20 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:20 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {0x0}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:08:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:08:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}}, 0x0) 10:08:20 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2334.688011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2334.702356] Module has invalid ELF structures [ 2334.711906] Module has invalid ELF structures 10:08:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f83ff11577286308d42b73ebe5ef7f6588dba73625c38717609bac99b2b8c538c9b030ed25724e3e7d7931dc33ccb75aaf2580c55dc37276988f8a70320d7aaea0d361a482cb01076d076a220644bf9211e05c2f326b7f30ccaba5621eddb22fa0213e84880933514e48038328f7d85bc3bf9077298e5476b1afade4a6234651d7b706b8d21c4c5d784b463556780d840ab44c0a6eb4e5116b9e65614e9d5103b1a44a98cd5e0f1d6c7ba318dbfd4"], 0x28}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2334.718707] Module has invalid ELF structures [ 2334.727605] Module has invalid ELF structures [ 2334.737088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2334.739203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2334.743685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:08:20 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}}, 0x0) [ 2334.775130] Module has invalid ELF structures 10:08:20 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:20 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {0x0}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:08:20 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x4000010, 0xffffffffffffffff, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r5}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:08:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:20 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2334.957843] Module has invalid ELF structures 10:08:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f83ff11577286308d42b73ebe5ef7f6588dba73625c38717609bac99b2b8c538c9b030ed25724e3e7d7931dc33ccb75aaf2580c55dc37276988f8a70320d7aaea0d361a482cb01076d076a220644bf9211e05c2f326b7f30ccaba5621eddb22fa0213e84880933514e48038328f7d85bc3bf9077298e5476b1afade4a6234651d7b706b8d21c4c5d784b463556780d840ab44c0a6eb4e5116b9e65614e9d5103b1a44a98cd5e0f1d6c7ba318dbfd4"], 0x28}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2334.999524] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2335.008008] Module has invalid ELF structures [ 2335.021478] Module has invalid ELF structures [ 2335.042982] Module has invalid ELF structures [ 2335.074996] Module has invalid ELF structures 10:08:20 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2335.107546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2335.109281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2335.111100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:08:20 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2335.147953] Module has invalid ELF structures 10:08:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) (fail_nth: 1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:08:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}}, 0x0) [ 2335.248117] Module has invalid ELF structures [ 2335.310512] Module has invalid ELF structures [ 2335.364982] FAULT_INJECTION: forcing a failure. [ 2335.364982] name failslab, interval 1, probability 0, space 0, times 0 [ 2335.366740] CPU: 1 PID: 14136 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 2335.367536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2335.368468] Call Trace: [ 2335.368768] dump_stack+0x107/0x167 [ 2335.369271] should_fail.cold+0x5/0xa [ 2335.369803] ? __get_vm_area_node+0xd4/0x340 [ 2335.370401] should_failslab+0x5/0x20 [ 2335.370941] kmem_cache_alloc_node_trace+0x59/0x340 [ 2335.371630] __get_vm_area_node+0xd4/0x340 [ 2335.372262] ? avc_has_perm_noaudit+0x3e0/0x3e0 [ 2335.372823] __vmalloc_node_range+0x13f/0x9e0 [ 2335.373329] ? kernel_read_file+0x6b8/0x790 [ 2335.373884] ? kernel_read_file+0x6b8/0x790 [ 2335.374491] ? selinux_kernel_read_file+0x89/0x410 [ 2335.375054] ? lock_downgrade+0x6d0/0x6d0 [ 2335.375524] ? __vmalloc_node+0x110/0x110 [ 2335.375999] ? kernel_read_file+0x6b8/0x790 [ 2335.376617] __vmalloc_node+0xb5/0x110 [ 2335.377194] ? kernel_read_file+0x6b8/0x790 [ 2335.377772] kernel_read_file+0x6b8/0x790 [ 2335.378243] ? __ia32_sys_fsconfig+0x150/0x150 [ 2335.378763] ? cap_capable+0x1cd/0x230 [ 2335.379211] kernel_read_file_from_fd+0xb8/0x110 [ 2335.379747] __do_sys_finit_module+0xe8/0x180 [ 2335.380259] ? __do_sys_init_module+0x230/0x230 [ 2335.380799] ? __ia32_sys_read+0xb0/0xb0 [ 2335.381268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2335.381885] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2335.382594] ? trace_hardirqs_on+0x5b/0x180 [ 2335.383235] do_syscall_64+0x33/0x40 [ 2335.383783] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2335.384437] RIP: 0033:0x7f4766e47b19 [ 2335.384857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2335.386945] RSP: 002b:00007f47643bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 2335.387805] RAX: ffffffffffffffda RBX: 00007f4766f5af60 RCX: 00007f4766e47b19 [ 2335.388619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2335.389426] RBP: 00007f47643bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2335.390414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2335.391413] R13: 00007ffe654e019f R14: 00007f47643bd300 R15: 0000000000022000 [ 2335.392875] syz-executor.1: vmalloc: allocation failure: 12 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 2335.394410] CPU: 1 PID: 14136 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 2335.395196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2335.396131] Call Trace: [ 2335.396433] dump_stack+0x107/0x167 [ 2335.396847] warn_alloc.cold+0x95/0x18a [ 2335.397301] ? zone_watermark_ok_safe+0x260/0x260 [ 2335.397850] ? __get_vm_area_node+0xd4/0x340 [ 2335.398351] ? __kasan_kmalloc.constprop.0+0xa2/0xd0 [ 2335.398935] ? __get_vm_area_node+0x262/0x340 [ 2335.399459] __vmalloc_node_range+0x58f/0x9e0 [ 2335.399965] ? kernel_read_file+0x6b8/0x790 [ 2335.400610] ? selinux_kernel_read_file+0x89/0x410 [ 2335.401187] ? lock_downgrade+0x6d0/0x6d0 [ 2335.401797] ? __vmalloc_node+0x110/0x110 [ 2335.402408] ? kernel_read_file+0x6b8/0x790 [ 2335.403001] __vmalloc_node+0xb5/0x110 [ 2335.403452] ? kernel_read_file+0x6b8/0x790 [ 2335.403939] kernel_read_file+0x6b8/0x790 [ 2335.404413] ? __ia32_sys_fsconfig+0x150/0x150 [ 2335.405100] ? cap_capable+0x1cd/0x230 [ 2335.405546] kernel_read_file_from_fd+0xb8/0x110 [ 2335.406222] __do_sys_finit_module+0xe8/0x180 [ 2335.406914] ? __do_sys_init_module+0x230/0x230 [ 2335.407459] ? __ia32_sys_read+0xb0/0xb0 [ 2335.407924] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2335.408520] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2335.409101] ? trace_hardirqs_on+0x5b/0x180 [ 2335.409589] do_syscall_64+0x33/0x40 [ 2335.410010] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2335.410588] RIP: 0033:0x7f4766e47b19 [ 2335.411022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2335.413113] RSP: 002b:00007f47643bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 2335.413985] RAX: ffffffffffffffda RBX: 00007f4766f5af60 RCX: 00007f4766e47b19 [ 2335.414806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2335.415617] RBP: 00007f47643bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2335.416466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2335.417281] R13: 00007ffe654e019f R14: 00007f47643bd300 R15: 0000000000022000 [ 2335.418191] Mem-Info: [ 2335.418597] active_anon:159 inactive_anon:62118 isolated_anon:0 [ 2335.418597] active_file:22093 inactive_file:57730 isolated_file:0 [ 2335.418597] unevictable:0 dirty:209 writeback:0 [ 2335.418597] slab_reclaimable:9430 slab_unreclaimable:70040 [ 2335.418597] mapped:81306 shmem:237 pagetables:5915 bounce:0 [ 2335.418597] free:100699 free_pcp:572 free_cma:0 [ 2335.422324] Node 0 active_anon:636kB inactive_anon:248472kB active_file:88372kB inactive_file:230920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:325224kB dirty:836kB writeback:0kB shmem:948kB writeback_tmp:0kB kernel_stack:8928kB all_unreclaimable? no [ 2335.425125] Node 0 DMA free:15908kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2335.428195] lowmem_reserve[]: 0 1616 1616 1616 [ 2335.428855] Node 0 DMA32 free:386672kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:636kB inactive_anon:248472kB active_file:88372kB inactive_file:230920kB unevictable:0kB writepending:916kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:23660kB bounce:0kB free_pcp:2288kB local_pcp:1228kB free_cma:0kB [ 2335.432325] lowmem_reserve[]: 0 0 0 0 [ 2335.432792] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 2335.434449] Node 0 DMA32: 36*4kB (UME) 5*8kB (UME) 33*16kB (UME) 2*32kB (UE) 2*64kB (E) 7*128kB (UE) 3*256kB (UME) 2*512kB (UE) 0*1024kB 1*2048kB (E) 93*4096kB (UM) = 386568kB [ 2335.436467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2335.437483] 35127 total pagecache pages [ 2335.438001] 0 pages in swap cache [ 2335.438440] Swap cache stats: add 0, delete 0, find 0/0 [ 2335.439117] Free swap = 0kB [ 2335.439532] Total swap = 0kB [ 2335.439942] 524158 pages RAM [ 2335.440397] 0 pages HighMem/MovableOnly [ 2335.440859] 105069 pages reserved [ 2335.465780] cgroup: fork rejected by pids controller in /syz1 10:08:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:08:37 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/212, 0xd4}, {&(0x7f00000002c0)=""/123, 0x7b}, {&(0x7f0000000340)=""/69, 0x45}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000440)=""/51, 0x33}], 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r5}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:08:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) (fail_nth: 1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:37 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000500)=""/114, 0x72}], 0x2, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:08:37 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:37 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x0, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff8310960c16112f08f", 0x1e) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2352.318529] Module has invalid ELF structures [ 2352.325737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2352.350987] Module has invalid ELF structures 10:08:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2352.356480] Module has invalid ELF structures [ 2352.399190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2352.401352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2352.404668] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:08:37 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x0, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) (fail_nth: 1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:08:37 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000500)=""/114, 0x72}], 0x2, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:08:37 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x8}], 0x1, 0x5) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x5, 0x4010, r5, 0x8000000) 10:08:37 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2352.557194] Module has invalid ELF structures 10:08:38 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2352.690585] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2352.703107] Module has invalid ELF structures [ 2352.719785] Module has invalid ELF structures 10:08:38 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x0, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2352.763788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2352.765810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2352.768624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2352.840437] Module has invalid ELF structures 10:08:38 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2352.875704] Module has invalid ELF structures [ 2352.996191] Module has invalid ELF structures 10:08:54 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d7", 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:54 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:08:54 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:08:54 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)={0x30, 0x19, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@private1}]}, 0x30}}, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) recvfrom(r0, &(0x7f00000001c0)=""/108, 0x6c, 0x0, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @random="f74791a5adec", 'team_slave_1\x00'}}, 0x80) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r5}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:08:54 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:08:54 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000500)=""/114, 0x72}], 0x2, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:08:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2369.276724] Module has invalid ELF structures 10:08:54 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d7", 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2369.292906] Module has invalid ELF structures 10:08:54 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2369.314864] Module has invalid ELF structures [ 2369.319868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:08:54 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2369.370759] Module has invalid ELF structures [ 2369.376085] Module has invalid ELF structures [ 2369.384637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2369.386116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2369.387763] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2369.485720] Module has invalid ELF structures 10:08:54 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x5) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:08:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:08:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2369.581702] Module has invalid ELF structures [ 2369.701596] Module has invalid ELF structures [ 2369.729090] Module has invalid ELF structures 10:09:09 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) 10:09:09 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:09 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) fcntl$setpipe(r0, 0x407, 0x8) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r2, &(0x7f00000003c0)="30b6cc7792d7857556fa05868719d55ddaf1935dba1c4803fd13a53447a3fe21e4d866ddc4c575d660397aeb8e059acd7a3507bb78c81fad7c3693512d1ddcee78670aa4bc5b0a04513b0b20231fcefc05766ca3efd587ff7c0c95550c4eeba1779aaea54a9c24bff92ad087be799edc1e86a0cb634fc846123bddb4066450f4c037a932ab722fc5b2fde1b57abf66b149a2f1490441447a0009217b2efabc0ae57d7c9af69aa6ad2d3838bb51cb1e5549b6daa182951fa4030050be26fe0f662f68312a1befcb357502812c0ca7055791567686c01f48ee", 0x71) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) dup3(r1, r0, 0x80000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) lgetxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="62747266732eaafe1d6dab54c7768004bda1c2636b388adbb147ade820eaf88d796d769555ce2c1f20054fc13e4a79de58b2089f7dbfd91b59af0900030000000000f8d4e1fe245d9e54a158df0776767d7a0b20b612bb1c777f9364fe9e8198855bd7463fa881c9ba44e6187b2b043704360f35138c5765a8fceff5b41d2240cd91fe40be5d70f2ea98beeee4bc7dcc574709c90ea562d20a2ed5139cd65d9c0caf1abf0f199d3fc3cd16c42d3cb1fb7c030a8b3a7b0a11e9c126fd9343af940bcab855cf19627fb802764c0c62514ba64cc2a0fdb6c9b6ce64f75d9ee16fcf2cd05e3be640000000000000000000"], &(0x7f0000000380)=""/61, 0x3d) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0xff, 0x6, 0x3f, 0x0, 0x63, 0x80340, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080)}, 0x8203, 0x101, 0x5, 0x5, 0x7, 0x1, 0x7, 0x0, 0x2e45, 0x0, 0x1f}, r4, 0x0, r5, 0x10) dup(r1) 10:09:09 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {0x0}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:09:09 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}}, 0x0) 10:09:09 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x6) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:09:09 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d7", 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2383.922477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2383.930071] Module has invalid ELF structures [ 2383.942744] Module has invalid ELF structures [ 2383.949380] Module has invalid ELF structures [ 2383.961891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2383.963106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2383.965309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2384.052933] Module has invalid ELF structures 10:09:22 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x7) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:09:22 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x5) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:22 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x4, 0x3, 0x1}, 0x3) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000340)=ANY=[@ANYBLOB="01c2e9418100c36f180000005420655bb516071ad68386667b15cbd94aa9dd2e758c5bb6aac41f6ee078cb0a141019f469d461a4ee02c3ee", @ANYRES32=r1, @ANYBLOB="01040000000000002e2f6600e8e2f93591696c654100"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x0) syz_io_uring_setup(0xdbd, &(0x7f00000001c0)={0x0, 0x562e, 0x0, 0x1, 0x1cc, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) listen(r6, 0x4) 10:09:22 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}}, 0x0) 10:09:22 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {0x0}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:09:22 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x2001, 0x50}, 0x18) copy_file_range(r0, &(0x7f0000000080)=0x100000001, r3, &(0x7f00000001c0)=0x1, 0x5, 0x0) 10:09:22 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2396.682117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2396.690834] Module has invalid ELF structures 10:09:22 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2396.725012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2396.727013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2396.743476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2396.783154] Module has invalid ELF structures 10:09:22 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}}, 0x0) [ 2396.848075] Module has invalid ELF structures 10:09:22 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2396.861666] Module has invalid ELF structures 10:09:22 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)={0x30, 0x19, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@private1}]}, 0x30}}, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) recvfrom(r0, &(0x7f00000001c0)=""/108, 0x6c, 0x0, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @random="f74791a5adec", 'team_slave_1\x00'}}, 0x80) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r5}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2396.928405] Module has invalid ELF structures 10:09:22 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {0x0}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:09:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:22 executing program 3: perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8}, 0x0, 0x13, 0xffffffffffffffff, 0xb) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2397.009867] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:09:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x400c000) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2000000000000, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f00000002c0)='./file0\x00', 0x5) close_range(r1, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r1, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x4000060e) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup(r4, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:09:22 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xc) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:09:22 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2397.182261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2397.183985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2397.185771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:09:22 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:22 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = fspick(0xffffffffffffffff, 0x0, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x9, [0x7ff, 0xffffffffffffff81, 0x6, 0x10001, 0xfa75, 0x5]}) r2 = syz_io_uring_setup(0x950, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) syz_io_uring_setup(0x3d9e, &(0x7f00000002c0)={0x0, 0x9dc1, 0x8, 0x1, 0x125, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x12, 0x0, r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r5}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="700000001e0075b90000000000000000fc0100000000000000000000000004000000000000000000fe8000000000000000000000000000000000000000000000240009000000000000000000000000000000002600000000956fdbbc937e8ebbd5c6cd000000000000000000000000000c00150000000000000000"], 0x70}}, 0x0) close_range(r6, r1, 0x0) 10:09:22 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x2, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:09:22 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) (fail_nth: 1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2397.286896] Module has invalid ELF structures [ 2397.309832] Module has invalid ELF structures [ 2397.350789] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:09:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x7) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2397.382439] Module has invalid ELF structures [ 2397.387579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:09:22 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa0586", 0xb) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:22 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000013c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd, 0x0, 0xf8, 0x80000001, 0xa, 0x1, {0x3, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, &(0x7f00000000c0)=0x80, &(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2397.437073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2397.438865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2397.441516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2397.485122] FAULT_INJECTION: forcing a failure. [ 2397.485122] name failslab, interval 1, probability 0, space 0, times 0 [ 2397.487539] CPU: 0 PID: 16052 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2397.488978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2397.490690] Call Trace: [ 2397.491243] dump_stack+0x107/0x167 [ 2397.492011] should_fail.cold+0x5/0xa [ 2397.492803] ? __get_vm_area_node+0xd4/0x340 [ 2397.493719] should_failslab+0x5/0x20 [ 2397.494518] kmem_cache_alloc_node_trace+0x59/0x340 [ 2397.495577] __get_vm_area_node+0xd4/0x340 [ 2397.496469] ? avc_has_perm_noaudit+0x3e0/0x3e0 [ 2397.497457] __vmalloc_node_range+0x13f/0x9e0 [ 2397.498389] ? kernel_read_file+0x6b8/0x790 [ 2397.499289] ? kernel_read_file+0x6b8/0x790 [ 2397.500209] ? selinux_kernel_read_file+0x89/0x410 [ 2397.501233] ? lock_downgrade+0x6d0/0x6d0 [ 2397.502100] ? __vmalloc_node+0x110/0x110 [ 2397.502971] ? kernel_read_file+0x6b8/0x790 [ 2397.503880] __vmalloc_node+0xb5/0x110 [ 2397.504688] ? kernel_read_file+0x6b8/0x790 [ 2397.505588] kernel_read_file+0x6b8/0x790 [ 2397.506456] ? __ia32_sys_fsconfig+0x150/0x150 [ 2397.507410] ? cap_capable+0x1cd/0x230 [ 2397.508233] kernel_read_file_from_fd+0xb8/0x110 [ 2397.509227] __do_sys_finit_module+0xe8/0x180 [ 2397.510162] ? __do_sys_init_module+0x230/0x230 [ 2397.511154] ? __ia32_sys_read+0xb0/0xb0 [ 2397.512018] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2397.513109] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2397.514177] ? trace_hardirqs_on+0x5b/0x180 [ 2397.515079] do_syscall_64+0x33/0x40 [ 2397.515865] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2397.516930] RIP: 0033:0x7f60e9368b19 [ 2397.517700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2397.521599] RSP: 002b:00007f60e68de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 2397.523234] RAX: ffffffffffffffda RBX: 00007f60e947bf60 RCX: 00007f60e9368b19 [ 2397.524769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2397.526291] RBP: 00007f60e68de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2397.527829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2397.529361] R13: 00007ffd772d037f R14: 00007f60e68de300 R15: 0000000000022000 [ 2397.532749] syz-executor.4: vmalloc: allocation failure: 14 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 2397.535604] CPU: 0 PID: 16052 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 2397.537087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2397.538874] Call Trace: [ 2397.539443] dump_stack+0x107/0x167 [ 2397.540237] warn_alloc.cold+0x95/0x18a [ 2397.541095] ? zone_watermark_ok_safe+0x260/0x260 [ 2397.542139] ? __get_vm_area_node+0xd4/0x340 [ 2397.543090] ? __kasan_kmalloc.constprop.0+0xa2/0xd0 [ 2397.544196] ? __get_vm_area_node+0x262/0x340 [ 2397.545169] __vmalloc_node_range+0x58f/0x9e0 [ 2397.546129] ? kernel_read_file+0x6b8/0x790 [ 2397.547061] ? selinux_kernel_read_file+0x89/0x410 [ 2397.548121] ? lock_downgrade+0x6d0/0x6d0 [ 2397.549022] ? __vmalloc_node+0x110/0x110 [ 2397.549923] ? kernel_read_file+0x6b8/0x790 [ 2397.550852] __vmalloc_node+0xb5/0x110 [ 2397.551704] ? kernel_read_file+0x6b8/0x790 [ 2397.552631] kernel_read_file+0x6b8/0x790 [ 2397.553527] ? __ia32_sys_fsconfig+0x150/0x150 [ 2397.554681] ? cap_capable+0x1cd/0x230 [ 2397.555619] kernel_read_file_from_fd+0xb8/0x110 [ 2397.556640] __do_sys_finit_module+0xe8/0x180 [ 2397.557603] ? __do_sys_init_module+0x230/0x230 [ 2397.558623] ? __ia32_sys_read+0xb0/0xb0 [ 2397.559506] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2397.560634] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2397.561731] ? trace_hardirqs_on+0x5b/0x180 [ 2397.562657] do_syscall_64+0x33/0x40 [ 2397.563453] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2397.564567] RIP: 0033:0x7f60e9368b19 [ 2397.565367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2397.569355] RSP: 002b:00007f60e68de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 2397.571004] RAX: ffffffffffffffda RBX: 00007f60e947bf60 RCX: 00007f60e9368b19 [ 2397.572555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2397.574103] RBP: 00007f60e68de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2397.575659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2397.577207] R13: 00007ffd772d037f R14: 00007f60e68de300 R15: 0000000000022000 [ 2397.578903] Mem-Info: [ 2397.579496] active_anon:160 inactive_anon:62290 isolated_anon:0 [ 2397.579496] active_file:22265 inactive_file:57788 isolated_file:0 [ 2397.579496] unevictable:0 dirty:247 writeback:0 [ 2397.579496] slab_reclaimable:9549 slab_unreclaimable:70883 [ 2397.579496] mapped:81333 shmem:237 pagetables:6001 bounce:0 [ 2397.579496] free:99196 free_pcp:581 free_cma:0 [ 2397.586417] Node 0 active_anon:640kB inactive_anon:249160kB active_file:89060kB inactive_file:231236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:325332kB dirty:1072kB writeback:0kB shmem:948kB writeback_tmp:0kB kernel_stack:8960kB all_unreclaimable? no [ 2397.591585] Node 0 DMA free:15908kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2397.597233] lowmem_reserve[]: 0 1616 1616 1616 [ 2397.598313] Node 0 DMA32 free:380580kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:640kB inactive_anon:249160kB active_file:89060kB inactive_file:231236kB unevictable:0kB writepending:1148kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:24004kB bounce:0kB free_pcp:2244kB local_pcp:1160kB free_cma:0kB [ 2397.605131] lowmem_reserve[]: 0 0 0 0 [ 2397.606028] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 2397.609345] Node 0 DMA32: 7*4kB (UM) 13*8kB (UME) 50*16kB (UE) 2*32kB (UE) 1*64kB (M) 2*128kB (ME) 1*256kB (E) 0*512kB 2*1024kB (UM) 2*2048kB (ME) 91*4096kB (UM) = 380452kB [ 2397.612999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2397.614982] 35378 total pagecache pages [ 2397.616001] 0 pages in swap cache [ 2397.616965] Swap cache stats: add 0, delete 0, find 0/0 [ 2397.618299] Free swap = 0kB [ 2397.618989] Total swap = 0kB [ 2397.619789] 524158 pages RAM [ 2397.620450] 0 pages HighMem/MovableOnly [ 2397.621437] 105069 pages reserved [ 2397.672114] Module has invalid ELF structures 10:09:36 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:09:36 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f00000000c0)=0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:09:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:36 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x2, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:09:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:36 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:36 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa0586", 0xb) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:36 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2410.999747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2411.018607] Module has invalid ELF structures 10:09:36 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x300) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:09:36 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x3, 0x9, 0xffffffff, 0x9, 0x8001}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2411.082939] Module has invalid ELF structures [ 2411.102956] Module has invalid ELF structures 10:09:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2411.117068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2411.118887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2411.120780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:09:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x18) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2411.141793] Module has invalid ELF structures [ 2411.242879] Module has invalid ELF structures 10:09:50 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:50 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa0586", 0xb) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:50 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000013c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd, 0x0, 0xf8, 0x80000001, 0xa, 0x1, {0x3, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, &(0x7f00000000c0)=0x80, &(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:09:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x2, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:09:50 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:50 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x500) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:09:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:50 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x40, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)=0x0) r4 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r6 = getpid() r7 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r7}, &(0x7f0000000040)) clone3(&(0x7f0000000480)={0x1014200, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240), {0x12}, &(0x7f00000002c0)=""/93, 0x5d, &(0x7f0000000380)=""/161, &(0x7f0000000440)=[r6, r7, r3, r4], 0x4, {r5}}, 0x58) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) utimensat(r5, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x100) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2425.068171] Module has invalid ELF structures 10:09:50 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2425.075508] Module has invalid ELF structures [ 2425.133820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2425.169044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2425.170867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2425.183586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:09:50 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x600) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:09:50 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2425.282179] Module has invalid ELF structures 10:09:50 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) write$binfmt_elf32(r3, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0xe9, 0x1, 0x7, 0x3f, 0x7, 0x2, 0x3e, 0x7, 0x1f6, 0x38, 0x15a, 0x2, 0xffff, 0x20, 0x2, 0x7ff, 0x1ff, 0x80}, [{0x5, 0x1, 0x1, 0x4, 0x0, 0x7, 0x2, 0x8001}, {0x60000000, 0x4, 0x2, 0x3, 0x5a9d, 0x1, 0x37, 0x80000000}], "4c9412c724f22eb19667cf7ecdb14b5e14183a1cf61833a992d8dbf02a1a729ff9f0e6692457a66da78efc397f012d64583f932de70f39c2288f7c290b26db919894e60b5b594ae877cf6b7cc9b1bd17a26920edbd38547dbffa3eff5fb69f135a5a261831203a4c444a090aed9bdae9d40b3dd2ecf14f68153d2502f555e750e96be3e7aa309e67d217cdbf9d6a9addad0597d412f115191ded4c0d0116460b519261f3321efa9c78b34607c93f6fda5d2b08f6d02f10278ee3eefccd38d13479810b35a0da825ce1b3081f65a01ce7a07109c3a27f64f1e1f0d25c6f4dd3bb268b6a78424256274a01c5c10ce74994749c", ['\x00', '\x00', '\x00']}, 0x46a) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) lremovexattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)=@random={'os2.', '\x00'}) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:09:50 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:50 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:50 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = fspick(0xffffffffffffffff, 0x0, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x9, [0x7ff, 0xffffffffffffff81, 0x6, 0x10001, 0xfa75, 0x5]}) r2 = syz_io_uring_setup(0x950, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) syz_io_uring_setup(0x3d9e, &(0x7f00000002c0)={0x0, 0x9dc1, 0x8, 0x1, 0x125, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x12, 0x0, r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r5}}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="700000001e0075b90000000000000000fc0100000000000000000000000004000000000000000000fe8000000000000000000000000000000000000000000000240009000000000000000000000000000000002600000000956fdbbc937e8ebbd5c6cd000000000000000000000000000c00150000000000000000"], 0x70}}, 0x0) close_range(r6, r1, 0x0) 10:09:50 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x700) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:09:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2425.444630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2425.450311] Module has invalid ELF structures [ 2425.470912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2425.473223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2425.477107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2425.486916] Module has invalid ELF structures 10:09:50 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000080)) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2425.548881] Module has invalid ELF structures [ 2425.564141] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:09:51 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:09:51 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 1) 10:09:51 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2425.712414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2425.742172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2425.743335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2425.744454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2425.744907] Module has invalid ELF structures [ 2425.790835] Module has invalid ELF structures [ 2425.854834] FAULT_INJECTION: forcing a failure. [ 2425.854834] name failslab, interval 1, probability 0, space 0, times 0 [ 2425.857911] CPU: 0 PID: 17555 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2425.859392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2425.861161] Call Trace: [ 2425.861727] dump_stack+0x107/0x167 [ 2425.862511] should_fail.cold+0x5/0xa [ 2425.863327] should_failslab+0x5/0x20 [ 2425.864151] kmem_cache_alloc_bulk+0x4b/0x320 [ 2425.865120] io_submit_sqes+0x6fe6/0x8610 [ 2425.866015] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2425.867085] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2425.868147] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2425.869168] ? find_held_lock+0x2c/0x110 [ 2425.870029] ? io_submit_sqes+0x8610/0x8610 [ 2425.870944] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2425.871975] ? wait_for_completion_io+0x270/0x270 [ 2425.872996] ? rcu_read_lock_any_held+0x75/0xa0 [ 2425.873974] ? vfs_write+0x354/0xb10 [ 2425.874762] ? fput_many+0x2f/0x1a0 [ 2425.875549] ? ksys_write+0x1a9/0x260 [ 2425.876361] ? __ia32_sys_read+0xb0/0xb0 [ 2425.877227] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2425.878339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2425.879428] do_syscall_64+0x33/0x40 [ 2425.880231] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2425.881351] RIP: 0033:0x7f133173ab19 [ 2425.882146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2425.886154] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2425.887813] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2425.889363] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2425.890916] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2425.892467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2425.894013] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 10:10:06 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:10:06 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:06 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) 10:10:06 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 2) 10:10:06 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:06 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xc00) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:10:06 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x500) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:06 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2441.060447] Module has invalid ELF structures [ 2441.102346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2441.111728] Module has invalid ELF structures [ 2441.117548] FAULT_INJECTION: forcing a failure. [ 2441.117548] name failslab, interval 1, probability 0, space 0, times 0 [ 2441.119836] CPU: 0 PID: 17795 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2441.121140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2441.122717] Call Trace: [ 2441.123217] dump_stack+0x107/0x167 [ 2441.123903] should_fail.cold+0x5/0xa [ 2441.124616] ? create_object.isra.0+0x3a/0xa20 [ 2441.125463] should_failslab+0x5/0x20 [ 2441.126185] kmem_cache_alloc+0x5b/0x310 [ 2441.126956] create_object.isra.0+0x3a/0xa20 [ 2441.127943] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2441.128915] kmem_cache_alloc_bulk+0x168/0x320 [ 2441.129788] io_submit_sqes+0x6fe6/0x8610 [ 2441.130588] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2441.131535] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2441.132499] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2441.133418] ? find_held_lock+0x2c/0x110 [ 2441.134192] ? io_submit_sqes+0x8610/0x8610 [ 2441.135020] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2441.135937] ? wait_for_completion_io+0x270/0x270 [ 2441.136857] ? rcu_read_lock_any_held+0x75/0xa0 [ 2441.137735] ? vfs_write+0x354/0xb10 [ 2441.138439] ? fput_many+0x2f/0x1a0 [ 2441.139127] ? ksys_write+0x1a9/0x260 [ 2441.139872] ? __ia32_sys_read+0xb0/0xb0 [ 2441.140637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2441.141612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2441.142572] do_syscall_64+0x33/0x40 [ 2441.143270] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2441.144242] RIP: 0033:0x7f133173ab19 [ 2441.144935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2441.148355] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2441.149726] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2441.151008] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2441.152292] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2441.153570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2441.154858] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 [ 2441.176438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2441.178317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2441.196109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:10:20 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:20 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 3) 10:10:20 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x5) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:20 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x0, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:10:21 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xdab) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:10:21 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 10:10:21 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000580)='./file0\x00', 0x8, 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:10:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x600) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2455.603956] Module has invalid ELF structures [ 2455.608329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:10:21 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2455.659298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2455.660379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2455.661562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2455.692048] FAULT_INJECTION: forcing a failure. [ 2455.692048] name failslab, interval 1, probability 0, space 0, times 0 [ 2455.694700] CPU: 0 PID: 18223 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2455.696171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2455.697831] Call Trace: [ 2455.698369] dump_stack+0x107/0x167 [ 2455.699117] should_fail.cold+0x5/0xa [ 2455.699904] ? create_object.isra.0+0x3a/0xa20 [ 2455.700836] should_failslab+0x5/0x20 [ 2455.701619] kmem_cache_alloc+0x5b/0x310 [ 2455.702449] ? mark_held_locks+0x9e/0xe0 [ 2455.703279] create_object.isra.0+0x3a/0xa20 [ 2455.704173] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2455.705217] kmem_cache_alloc_bulk+0x168/0x320 [ 2455.706156] io_submit_sqes+0x6fe6/0x8610 [ 2455.707014] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2455.708048] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2455.709071] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2455.710058] ? find_held_lock+0x2c/0x110 [ 2455.710892] ? io_submit_sqes+0x8610/0x8610 [ 2455.711788] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2455.712792] ? wait_for_completion_io+0x270/0x270 [ 2455.713778] ? rcu_read_lock_any_held+0x75/0xa0 10:10:21 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x6) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2455.714714] ? vfs_write+0x354/0xb10 [ 2455.715603] ? fput_many+0x2f/0x1a0 [ 2455.716358] ? ksys_write+0x1a9/0x260 10:10:21 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x0, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2455.717140] ? __ia32_sys_read+0xb0/0xb0 [ 2455.718019] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2455.719086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2455.720148] do_syscall_64+0x33/0x40 [ 2455.720904] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2455.721949] RIP: 0033:0x7f133173ab19 [ 2455.722700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2455.726440] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2455.727990] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2455.729461] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2455.730935] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2455.732420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2455.733898] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 10:10:21 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c00) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2455.739752] Module has invalid ELF structures [ 2455.849688] Module has invalid ELF structures 10:10:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x700) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:21 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2455.961536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:10:21 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 10:10:21 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2456.020057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2456.021835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2456.026492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2456.030820] Module has invalid ELF structures [ 2456.154487] Module has invalid ELF structures [ 2456.172708] Module has invalid ELF structures 10:10:21 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x0, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2456.322929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2456.376870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2456.378390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2456.379987] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:10:35 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x0) 10:10:35 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 4) 10:10:35 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:10:35 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xdb5) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:35 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:35 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:10:35 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x7) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:35 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2470.493626] FAULT_INJECTION: forcing a failure. [ 2470.493626] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.496708] CPU: 1 PID: 19075 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2470.498459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.500579] Call Trace: [ 2470.501250] dump_stack+0x107/0x167 [ 2470.502192] should_fail.cold+0x5/0xa [ 2470.503163] ? create_object.isra.0+0x3a/0xa20 [ 2470.504331] should_failslab+0x5/0x20 [ 2470.505301] kmem_cache_alloc+0x5b/0x310 [ 2470.506335] ? mark_held_locks+0x9e/0xe0 [ 2470.507366] create_object.isra.0+0x3a/0xa20 [ 2470.508485] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2470.509803] kmem_cache_alloc_bulk+0x168/0x320 [ 2470.510987] io_submit_sqes+0x6fe6/0x8610 [ 2470.512062] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2470.513347] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2470.514905] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2470.516231] ? io_submit_sqes+0x8610/0x8610 [ 2470.517155] ? recalibrate_cpu_khz+0x10/0x10 [ 2470.518100] ? ktime_get+0x158/0x1f0 [ 2470.518897] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2470.519823] ? clockevents_program_event+0x131/0x360 [ 2470.520925] ? tick_program_event+0xa8/0x140 [ 2470.521876] ? hrtimer_interrupt+0x771/0x9b0 [ 2470.523012] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2470.524362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2470.525466] do_syscall_64+0x33/0x40 [ 2470.526265] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2470.527339] RIP: 0033:0x7f133173ab19 [ 2470.528132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.532085] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2470.533714] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2470.535401] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2470.537103] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.538629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2470.540164] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 [ 2470.540539] Module has invalid ELF structures [ 2470.547601] Module has invalid ELF structures [ 2470.560380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2470.566688] Module has invalid ELF structures 10:10:36 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x0) [ 2470.666251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2470.667109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2470.668556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2470.750102] Module has invalid ELF structures 10:10:36 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 5) 10:10:36 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:36 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:10:36 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(0x0, 0x0) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:36 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) dup2(r0, r1) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x50) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:10:36 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xab0d) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2470.859213] Module has invalid ELF structures [ 2470.890904] FAULT_INJECTION: forcing a failure. [ 2470.890904] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.893714] CPU: 1 PID: 19497 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2470.895151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.897174] Call Trace: [ 2470.897790] dump_stack+0x107/0x167 [ 2470.898565] should_fail.cold+0x5/0xa [ 2470.899359] ? create_object.isra.0+0x3a/0xa20 [ 2470.900328] should_failslab+0x5/0x20 [ 2470.901124] kmem_cache_alloc+0x5b/0x310 [ 2470.901976] ? mark_held_locks+0x9e/0xe0 [ 2470.902835] create_object.isra.0+0x3a/0xa20 [ 2470.903743] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2470.904827] kmem_cache_alloc_bulk+0x168/0x320 [ 2470.905783] io_submit_sqes+0x6fe6/0x8610 [ 2470.906659] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2470.907957] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2470.909109] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2470.910117] ? find_held_lock+0x2c/0x110 [ 2470.910976] ? io_submit_sqes+0x8610/0x8610 [ 2470.912025] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2470.913033] ? wait_for_completion_io+0x270/0x270 [ 2470.914319] ? rcu_read_lock_any_held+0x75/0xa0 [ 2470.915419] ? vfs_write+0x354/0xb10 [ 2470.916433] ? fput_many+0x2f/0x1a0 [ 2470.917192] ? ksys_write+0x1a9/0x260 [ 2470.917988] ? __ia32_sys_read+0xb0/0xb0 [ 2470.918845] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2470.920064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2470.921422] do_syscall_64+0x33/0x40 [ 2470.922198] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2470.923265] RIP: 0033:0x7f133173ab19 [ 2470.924050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.928235] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2470.930133] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2470.931700] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2470.933201] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 10:10:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x0) [ 2470.934691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2470.936569] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 [ 2470.964591] Module has invalid ELF structures [ 2471.010877] Module has invalid ELF structures [ 2471.028931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:10:36 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(0x0, 0x0) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2471.072849] Module has invalid ELF structures 10:10:36 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(0x0, 0x0) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2471.114150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2471.115230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2471.116145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2471.162079] Module has invalid ELF structures [ 2471.171787] Module has invalid ELF structures 10:10:36 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:36 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x3}, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) 10:10:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:36 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:10:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c00) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2471.373165] Module has invalid ELF structures [ 2471.409919] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2471.433535] Module has invalid ELF structures [ 2471.445820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2471.447069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2471.448080] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:10:55 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x80000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:10:55 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xe) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:55 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x93) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='\\\x00', &(0x7f0000000140)='./file0\x00', r2) pwritev2(r2, &(0x7f0000000480)=[{&(0x7f00000001c0)="0a58020b807af1b175840da22d584855cdc63f74afd0af5bc749d1a32534a13ac303ca9319be1bd3ab4cac605dcab54367f689c6bc543c212426b7fbcac43675b786f9cf9413ce2810bd16cfe17d3a60c86a2291871da1a175540e7f", 0x5c}, {&(0x7f0000000240)="5c22057cf422147f2d65a55c4d217f9159bb6706e9", 0x15}, {&(0x7f00000002c0)="182bb9d8d445d1045e899ff97eec7210266273b90cbe908d4038b606941a5fb604ddfb901fff", 0x26}, {&(0x7f0000000300)="cfc7c00d79b3d0c819558975dfdebee69387dd4f30f28f56b4f7a01d", 0x1c}, {&(0x7f0000000380)="b06dc7726698f4b277cd8eefa0acbf8477b526b493f45e3604f2f651feb45bb0f6bb072c1171a1bed840626974e55cd87c57e424088747d334278e39be9f3af9dcbaf376eef7d4a3d0ae3f0dd55496720bae6b167cd0e638cf80030ca5d253f227739a3e7c03077a7d6656c2dc7c47d07a09d78b3876662a34476d498c5823670ed0e620027f286fa8a3509b3ee6f736c430ba4d8174b1768b10c1bcbd81cf7b82d18bce952ccaaace7c0046998ed48428fc9bac9b1505da62b46e5cb95bd6eb4e6381f7f6cdbcbb1fe9184adae22b0b604c32597cb4809cc2e1d80a4ecf4fee7b9a18800c9353b31d552418af7560c530390c4ac2324bf3", 0xf8}, {&(0x7f0000000740)="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", 0x1000}], 0x6, 0x7fffffff, 0x1, 0x18) r3 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x4) finit_module(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x810, r2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xcc4d) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:10:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:55 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:55 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:55 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(0x0, &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:10:55 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 6) [ 2490.127327] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2490.148496] Module has invalid ELF structures [ 2490.175760] Module has invalid ELF structures [ 2490.182891] FAULT_INJECTION: forcing a failure. [ 2490.182891] name failslab, interval 1, probability 0, space 0, times 0 [ 2490.185548] CPU: 0 PID: 20155 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2490.187008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2490.188770] Call Trace: [ 2490.189336] dump_stack+0x107/0x167 [ 2490.190165] should_fail.cold+0x5/0xa [ 2490.190983] ? create_object.isra.0+0x3a/0xa20 [ 2490.191961] should_failslab+0x5/0x20 [ 2490.192799] kmem_cache_alloc+0x5b/0x310 [ 2490.193670] ? mark_held_locks+0x9e/0xe0 [ 2490.194548] create_object.isra.0+0x3a/0xa20 [ 2490.195491] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2490.196593] kmem_cache_alloc_bulk+0x168/0x320 [ 2490.197587] io_submit_sqes+0x6fe6/0x8610 [ 2490.198491] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2490.199564] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2490.200625] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2490.201650] ? find_held_lock+0x2c/0x110 [ 2490.202512] ? io_submit_sqes+0x8610/0x8610 [ 2490.203434] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2490.204469] ? wait_for_completion_io+0x270/0x270 [ 2490.205496] ? rcu_read_lock_any_held+0x75/0xa0 [ 2490.206481] ? vfs_write+0x354/0xb10 [ 2490.207271] ? fput_many+0x2f/0x1a0 [ 2490.208051] ? ksys_write+0x1a9/0x260 [ 2490.208866] ? __ia32_sys_read+0xb0/0xb0 [ 2490.209733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2490.210845] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2490.211942] do_syscall_64+0x33/0x40 [ 2490.212740] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2490.213826] RIP: 0033:0x7f133173ab19 [ 2490.214615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2490.218530] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2490.220163] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2490.221676] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2490.223187] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2490.224710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2490.226231] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 10:10:55 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(0x0, &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:10:55 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:55 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xb50d) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:10:55 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2490.462439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:10:55 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x200000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:11:10 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 7) 10:11:10 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xe0ffff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:11:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x300) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:10 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:10 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(0x0, &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:11:10 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x80000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:10 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x0, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:10 executing program 7: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x1b, {0x1b, 0x10, "a74ab37feb8a185b5389e1f6ae9952eee8d87361b8b2f4975c"}}, &(0x7f0000000a80)=ANY=[@ANYBLOB="00039c0000009c03d0f61bf6cd593544fd8fd4d55bb1bd71b30229ed38f3dc8d7d13acad127a2aee15b0f8b92da759b88c3155caab90424018d34842a551bdcff55897db9417481834cc6efe8de52e2eaef062354c27ec64b783b5bdb09dbd1e5d79bb8ec9beeba7c3b9c38ed0c324bf4181b4441847667a88f3f26c1b378909ddb94643498bf23e39947d94901e89050000000000000030b0811b1ce41b3e3d35f29daf537934d0c6a213ac3dfb7738659ea47afddffb"], &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x80, 0x62, 0x5, "8f2501e7", "50d75fc9"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1, 0x1, 0x0, 0x6, 0x7, 0x5}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000380)={0x40, 0x14, 0xba, "192a17c3f92204472750a85be7a741b8d2e180b056de3214e472ad52950074125c6f9065dc92da800d4bb85d90c0168c43d66e30911d3df3971735a93fce8080d1e1f4dc87863aa6509b61c53a263681ec4f4c19294e9ac63f386a7b04d2cd6fa7424aa7d720c89bfd9ebd9c521f82dccccbf7afece51e2b25ca71a5ee817d839a235eddd0f5b8ae966874adfce32ad586b9d1b2aaf47b2f4d8f027fa42d44e130909e817c7d5e58f5d036f9085a6eb2a3cce3e86f8fa77425fc"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x4, 0x40, [0xe1]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x24}, &(0x7f0000000780)={0x40, 0xb, 0x2, "a1dd"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000800)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000840)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000000880)={0x40, 0x19, 0x2, "1834"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0xffff}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x1}}) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2505.352847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2505.376136] FAULT_INJECTION: forcing a failure. [ 2505.376136] name failslab, interval 1, probability 0, space 0, times 0 [ 2505.377797] CPU: 0 PID: 21196 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2505.378735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2505.379850] Call Trace: [ 2505.380231] dump_stack+0x107/0x167 [ 2505.380722] should_fail.cold+0x5/0xa [ 2505.381233] ? create_object.isra.0+0x3a/0xa20 [ 2505.381847] should_failslab+0x5/0x20 [ 2505.382357] kmem_cache_alloc+0x5b/0x310 [ 2505.382908] ? mark_held_locks+0x9e/0xe0 [ 2505.383457] create_object.isra.0+0x3a/0xa20 [ 2505.384061] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2505.384747] kmem_cache_alloc_bulk+0x168/0x320 [ 2505.385372] io_submit_sqes+0x6fe6/0x8610 [ 2505.385947] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2505.386629] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2505.387307] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2505.387956] ? find_held_lock+0x2c/0x110 [ 2505.388537] ? io_submit_sqes+0x8610/0x8610 [ 2505.389122] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2505.389772] ? wait_for_completion_io+0x270/0x270 [ 2505.390415] ? rcu_read_lock_any_held+0x75/0xa0 [ 2505.391043] ? vfs_write+0x354/0xb10 [ 2505.391548] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2505.392183] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2505.392920] ? ksys_write+0x1a9/0x260 [ 2505.393432] ? __ia32_sys_read+0xb0/0xb0 [ 2505.393982] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2505.394682] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2505.395368] do_syscall_64+0x33/0x40 [ 2505.395867] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2505.396563] RIP: 0033:0x7f133173ab19 [ 2505.397068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2505.399663] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2505.400700] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2505.401650] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2505.402600] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2505.403547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2505.404515] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 10:11:10 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:10 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2505.418735] Module has invalid ELF structures [ 2505.443865] Module has invalid ELF structures 10:11:25 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x40ea2, 0x18) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) write$binfmt_elf32(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x2a, 0x20, 0x2, 0x80, 0x401, 0x0, 0x6, 0x8229, 0x1a6, 0x38, 0x396, 0x7ff, 0x6, 0x20, 0x2, 0x49a4, 0xd75, 0x8}, [{0x1, 0xfc9c, 0xff, 0x6, 0x5, 0xa841, 0x9, 0x6}, {0x252f3b18a977b135, 0x46, 0x7, 0x8, 0x9, 0x8000, 0x10001, 0x3}], "d9c5de5c8fd4eec69bef941324b294c5278665c7162608ac8cdd14f8792588489858be51893a1382383550f17a5df23284a98ffc5100660b2589260f078cf64cc98949f49c0a01ceed4a74628d8a07e7dc6ee5921cdb21ec2ccb2863624c476b14200884aa93189cdf9ee0b56a523827a27c89c87f4c5e", ['\x00', '\x00', '\x00', '\x00']}, 0x4ef) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:11:25 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 8) 10:11:25 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x500) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:25 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x0, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x200000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:25 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:25 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x0) 10:11:25 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2519.800873] FAULT_INJECTION: forcing a failure. [ 2519.800873] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.803674] CPU: 1 PID: 21535 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2519.805286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2519.807254] Call Trace: [ 2519.807870] dump_stack+0x107/0x167 [ 2519.808747] should_fail.cold+0x5/0xa [ 2519.809637] ? create_object.isra.0+0x3a/0xa20 [ 2519.810703] should_failslab+0x5/0x20 [ 2519.811589] kmem_cache_alloc+0x5b/0x310 [ 2519.812537] ? mark_held_locks+0x9e/0xe0 [ 2519.813484] create_object.isra.0+0x3a/0xa20 [ 2519.814500] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2519.815693] kmem_cache_alloc_bulk+0x168/0x320 [ 2519.816772] io_submit_sqes+0x6fe6/0x8610 [ 2519.817740] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2519.818896] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2519.820049] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2519.821170] ? find_held_lock+0x2c/0x110 [ 2519.822115] ? io_submit_sqes+0x8610/0x8610 [ 2519.823125] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2519.824247] ? wait_for_completion_io+0x270/0x270 [ 2519.825366] ? rcu_read_lock_any_held+0x75/0xa0 [ 2519.826439] ? vfs_write+0x354/0xb10 [ 2519.827304] ? fput_many+0x2f/0x1a0 [ 2519.827939] Module has invalid ELF structures [ 2519.828161] ? ksys_write+0x1a9/0x260 [ 2519.829722] ? __ia32_sys_read+0xb0/0xb0 [ 2519.830663] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2519.831877] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2519.833078] do_syscall_64+0x33/0x40 [ 2519.833942] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2519.835117] RIP: 0033:0x7f133173ab19 [ 2519.835977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2519.840248] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2519.841981] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2519.843613] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2519.845262] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2519.846872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2519.848499] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 10:11:25 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2519.876376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:11:25 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x0) 10:11:25 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x3000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2520.003634] Module has invalid ELF structures 10:11:25 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 10:11:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xe0ffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:25 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x100010, r2, 0x10000000) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x9001) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd, 0x54, {0x0, r4}, 0x2, 0x1, 0x0, {0x0, 0x0, r5}}, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000140)=[r2, r6, r1]}, 0x3) 10:11:25 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x0, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:25 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x600) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2520.108950] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:11:25 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x0) 10:11:25 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 9) [ 2520.270756] Module has invalid ELF structures [ 2520.280983] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2520.317551] Module has invalid ELF structures 10:11:25 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2520.432656] Module has invalid ELF structures [ 2520.444354] FAULT_INJECTION: forcing a failure. [ 2520.444354] name failslab, interval 1, probability 0, space 0, times 0 [ 2520.445727] CPU: 0 PID: 22202 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2520.446502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2520.447454] Call Trace: [ 2520.447763] dump_stack+0x107/0x167 [ 2520.448197] should_fail.cold+0x5/0xa [ 2520.448633] ? create_object.isra.0+0x3a/0xa20 [ 2520.449157] should_failslab+0x5/0x20 [ 2520.449584] kmem_cache_alloc+0x5b/0x310 [ 2520.450042] ? mark_held_locks+0x9e/0xe0 [ 2520.450499] create_object.isra.0+0x3a/0xa20 [ 2520.450999] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2520.451570] kmem_cache_alloc_bulk+0x168/0x320 [ 2520.452116] io_submit_sqes+0x6fe6/0x8610 [ 2520.452613] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2520.453183] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2520.453761] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2520.454306] ? find_held_lock+0x2c/0x110 [ 2520.454780] ? io_submit_sqes+0x8610/0x8610 [ 2520.455271] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2520.455830] ? wait_for_completion_io+0x270/0x270 [ 2520.456397] ? rcu_read_lock_any_held+0x75/0xa0 [ 2520.456919] ? vfs_write+0x354/0xb10 [ 2520.457351] ? fput_many+0x2f/0x1a0 [ 2520.457765] ? ksys_write+0x1a9/0x260 [ 2520.458225] ? __ia32_sys_read+0xb0/0xb0 [ 2520.458685] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2520.459274] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2520.459855] do_syscall_64+0x33/0x40 [ 2520.460301] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2520.460879] RIP: 0033:0x7f133173ab19 [ 2520.461298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2520.463392] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2520.464275] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2520.465092] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2520.465906] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2520.466718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2520.467546] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 [ 2520.521851] Module has invalid ELF structures 10:11:40 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 10) 10:11:40 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x300) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:40 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x4000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:11:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:40 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) r3 = syz_io_uring_setup(0x5407, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xac}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r6}}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x141000, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r8, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x100, @remote, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)='w|\fz}', 0x5}, {&(0x7f0000000380)="b3787cd03fde48aab6dd91032a551abdc925cf3e22057587d5ad00802fbc79a30f725631243bf6325fe57b03de1930885e6a33ccbd69c34c987461d4adc0c5184fe17607a4fec7fd36116b0c3bd244b15108bb3c607fa8c0c10ac372649b3e3dcb624f62a2776ef8006f1ee6369f3a5fc81124966cb9a99ca6858043bcb35cebe0850a49", 0x84}, {&(0x7f0000000440)="339c46cebfe579ccb79b744f41493aa0924b8a16902d902345df690105e9deda359df6d73b7566624e074a69c61b6cadbedaf93dc6a05d9451f1727b9c568bf21520b00619e20b7f8db8821ec73396d78a12b4d583e694581bdc2b640ce76e7780161a1091a09d840cd9f5b5765f9342a5a87b5b9f344fda53e5a20a2361489c0bbf8401c249983617df9448487b13d376f1f8d1cb8bcae4f62ca66b3c922c9b513b116f88ab569dc0dfea5a75", 0xad}], 0x3}, 0x0, 0x4000000, 0x1}, 0x5) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:11:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x0) 10:11:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:40 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x700) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2535.168582] FAULT_INJECTION: forcing a failure. [ 2535.168582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2535.170773] CPU: 1 PID: 22391 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2535.171852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2535.173137] Call Trace: [ 2535.173521] dump_stack+0x107/0x167 [ 2535.174084] should_fail.cold+0x5/0xa [ 2535.174680] _copy_from_user+0x2e/0x1b0 [ 2535.175305] move_addr_to_kernel.part.0+0x31/0x110 [ 2535.176059] move_addr_to_kernel+0x4f/0x70 [ 2535.176779] io_connect+0x47a/0x610 [ 2535.177409] ? io_prep_rw+0x1050/0x1050 [ 2535.178048] ? __lockdep_reset_lock+0x180/0x180 [ 2535.178893] ? lock_acquire+0x197/0x470 [ 2535.179570] ? __lock_acquire+0xbb1/0x5b00 [ 2535.180231] io_issue_sqe+0x1611/0x77b0 [ 2535.180849] ? perf_trace_lock+0xac/0x490 [ 2535.181489] ? lock_chain_count+0x20/0x20 [ 2535.182135] ? io_connect+0x610/0x610 [ 2535.182725] ? lock_acquire+0x197/0x470 [ 2535.183339] ? find_held_lock+0x2c/0x110 [ 2535.183974] ? __fget_files+0x2cf/0x520 [ 2535.184595] ? lock_downgrade+0x6d0/0x6d0 [ 2535.185238] __io_queue_sqe+0x90/0x9d0 [ 2535.185835] ? io_issue_sqe+0x77b0/0x77b0 [ 2535.186469] ? __fget_files+0x2f8/0x520 [ 2535.187086] io_submit_sqes+0x44aa/0x8610 [ 2535.187746] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2535.188520] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2535.189256] ? find_held_lock+0x2c/0x110 [ 2535.189881] ? io_submit_sqes+0x8610/0x8610 [ 2535.190549] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2535.191291] ? wait_for_completion_io+0x270/0x270 [ 2535.192034] ? rcu_read_lock_any_held+0x75/0xa0 [ 2535.192814] ? vfs_write+0x354/0xb10 [ 2535.193451] ? fput_many+0x2f/0x1a0 [ 2535.194160] ? ksys_write+0x1a9/0x260 [ 2535.194804] ? __ia32_sys_read+0xb0/0xb0 [ 2535.195473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2535.196427] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2535.197372] do_syscall_64+0x33/0x40 [ 2535.197944] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2535.198832] RIP: 0033:0x7f133173ab19 [ 2535.199515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2535.202805] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2535.204044] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2535.205371] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2535.206449] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2535.207741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2535.208993] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 [ 2535.214026] Module has invalid ELF structures 10:11:40 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x5000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:11:40 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 1) 10:11:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x0) 10:11:40 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x6000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2535.420144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2535.433761] Module has invalid ELF structures [ 2535.488833] FAULT_INJECTION: forcing a failure. [ 2535.488833] name failslab, interval 1, probability 0, space 0, times 0 [ 2535.490547] CPU: 1 PID: 22715 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2535.491703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2535.493159] Call Trace: [ 2535.493513] dump_stack+0x107/0x167 [ 2535.493994] should_fail.cold+0x5/0xa [ 2535.494555] ? sock_alloc_inode+0x18/0x1c0 [ 2535.495262] should_failslab+0x5/0x20 [ 2535.495782] kmem_cache_alloc+0x5b/0x310 [ 2535.496535] ? selinux_ipv6_output+0x180/0x180 [ 2535.497317] ? sock_free_inode+0x20/0x20 [ 2535.497847] sock_alloc_inode+0x18/0x1c0 [ 2535.498380] ? sock_free_inode+0x20/0x20 [ 2535.498926] alloc_inode+0x63/0x240 [ 2535.499581] new_inode_pseudo+0x14/0xe0 [ 2535.500153] sock_alloc+0x3c/0x270 [ 2535.500733] __sock_create+0xbd/0x7f0 [ 2535.501356] ? wait_for_completion_io+0x270/0x270 [ 2535.502127] __sys_socket+0xef/0x200 [ 2535.502613] ? fput_many+0x2f/0x1a0 [ 2535.503083] ? move_addr_to_kernel+0x70/0x70 [ 2535.503650] ? ksys_write+0x1a9/0x260 [ 2535.504151] ? __ia32_sys_read+0xb0/0xb0 [ 2535.504689] __x64_sys_socket+0x6f/0xb0 [ 2535.505210] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2535.505877] do_syscall_64+0x33/0x40 [ 2535.506360] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2535.507025] RIP: 0033:0x7faf8a05d197 [ 2535.507506] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2535.509900] RSP: 002b:00007faf875d0098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 2535.510897] RAX: ffffffffffffffda RBX: 00007faf8a16ef60 RCX: 00007faf8a05d197 [ 2535.511815] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2535.512749] RBP: 00007faf875d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2535.513676] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 2535.514586] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 2535.515762] socket: no more sockets 10:11:58 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xe00) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:58 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 11) 10:11:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x7000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:11:58 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) ioctl$CDROMSETSPINDOWN(r2, 0x531e, &(0x7f0000000080)=0x9) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) 10:11:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x0) 10:11:58 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 2) [ 2553.268999] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2553.304605] Module has invalid ELF structures [ 2553.314669] FAULT_INJECTION: forcing a failure. [ 2553.314669] name failslab, interval 1, probability 0, space 0, times 0 [ 2553.317380] CPU: 0 PID: 22855 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2553.318841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2553.320595] Call Trace: [ 2553.321167] dump_stack+0x107/0x167 [ 2553.321930] should_fail.cold+0x5/0xa [ 2553.322743] ? create_object.isra.0+0x3a/0xa20 [ 2553.323697] should_failslab+0x5/0x20 [ 2553.324505] kmem_cache_alloc+0x5b/0x310 [ 2553.325369] create_object.isra.0+0x3a/0xa20 [ 2553.326298] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2553.327378] kmem_cache_alloc+0x159/0x310 [ 2553.328263] ? selinux_ipv6_output+0x180/0x180 [ 2553.329226] ? sock_free_inode+0x20/0x20 [ 2553.330084] sock_alloc_inode+0x18/0x1c0 [ 2553.330932] ? sock_free_inode+0x20/0x20 [ 2553.331788] alloc_inode+0x63/0x240 [ 2553.332560] new_inode_pseudo+0x14/0xe0 [ 2553.333397] sock_alloc+0x3c/0x270 [ 2553.334142] __sock_create+0xbd/0x7f0 [ 2553.334937] ? wait_for_completion_io+0x270/0x270 [ 2553.335954] __sys_socket+0xef/0x200 [ 2553.336742] ? fput_many+0x2f/0x1a0 [ 2553.337502] ? move_addr_to_kernel+0x70/0x70 [ 2553.338427] ? ksys_write+0x1a9/0x260 [ 2553.339228] ? __ia32_sys_read+0xb0/0xb0 [ 2553.340088] __x64_sys_socket+0x6f/0xb0 [ 2553.340939] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2553.342035] do_syscall_64+0x33/0x40 [ 2553.342816] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2553.343894] RIP: 0033:0x7faf8a05d197 [ 2553.344778] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2553.348694] RSP: 002b:00007faf875d0098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 2553.350319] RAX: ffffffffffffffda RBX: 00007faf8a16ef60 RCX: 00007faf8a05d197 [ 2553.351821] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2553.353327] RBP: 00007faf875d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2553.354831] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 2553.355159] Module has invalid ELF structures [ 2553.356333] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 10:11:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:11:58 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xe4a) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2553.385193] FAULT_INJECTION: forcing a failure. [ 2553.385193] name failslab, interval 1, probability 0, space 0, times 0 [ 2553.387923] CPU: 0 PID: 22856 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2553.389527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2553.391281] Call Trace: [ 2553.391856] dump_stack+0x107/0x167 [ 2553.392651] should_fail.cold+0x5/0xa [ 2553.393470] ? io_connect+0x3b1/0x610 [ 2553.394297] should_failslab+0x5/0x20 [ 2553.395111] __kmalloc+0x72/0x390 [ 2553.395886] io_connect+0x3b1/0x610 [ 2553.396677] ? io_prep_rw+0x1050/0x1050 [ 2553.397555] ? __lock_acquire+0xbb1/0x5b00 [ 2553.398467] io_issue_sqe+0x1611/0x77b0 [ 2553.399333] ? perf_trace_lock+0xac/0x490 [ 2553.400242] ? lock_chain_count+0x20/0x20 [ 2553.401148] ? io_connect+0x610/0x610 [ 2553.401955] ? lock_acquire+0x197/0x470 [ 2553.402798] ? find_held_lock+0x2c/0x110 [ 2553.403657] ? __fget_files+0x2cf/0x520 [ 2553.404509] ? lock_downgrade+0x6d0/0x6d0 [ 2553.405382] __io_queue_sqe+0x90/0x9d0 [ 2553.406210] ? io_issue_sqe+0x77b0/0x77b0 [ 2553.407075] ? __fget_files+0x2f8/0x520 [ 2553.407921] io_submit_sqes+0x44aa/0x8610 [ 2553.408840] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2553.409882] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2553.410893] ? find_held_lock+0x2c/0x110 [ 2553.411751] ? io_submit_sqes+0x8610/0x8610 [ 2553.412671] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2553.413683] ? wait_for_completion_io+0x270/0x270 [ 2553.414701] ? rcu_read_lock_any_held+0x75/0xa0 [ 2553.415687] ? vfs_write+0x354/0xb10 [ 2553.416477] ? fput_many+0x2f/0x1a0 [ 2553.417242] ? ksys_write+0x1a9/0x260 [ 2553.418043] ? __ia32_sys_read+0xb0/0xb0 [ 2553.418900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2553.419999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2553.421097] do_syscall_64+0x33/0x40 [ 2553.421877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2553.422962] RIP: 0033:0x7f133173ab19 [ 2553.423743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2553.427643] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2553.429264] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2553.430764] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2553.432284] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2553.433828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2553.435329] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 [ 2553.456705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2553.458430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2553.460601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:11:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000140)={0x1, 0x1, 0x12, 0x9, 0x108, &(0x7f0000000600)}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xc) finit_module(r1, 0x0, 0x0) 10:11:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xc000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:11:58 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 3) 10:11:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x3000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2553.610585] Module has invalid ELF structures 10:11:59 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2553.706130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:11:59 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2553.771592] FAULT_INJECTION: forcing a failure. [ 2553.771592] name failslab, interval 1, probability 0, space 0, times 0 [ 2553.774507] CPU: 0 PID: 23362 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2553.776071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2553.777856] Call Trace: [ 2553.778429] dump_stack+0x107/0x167 [ 2553.779214] should_fail.cold+0x5/0xa [ 2553.780039] ? security_inode_alloc+0x34/0x160 [ 2553.781020] should_failslab+0x5/0x20 [ 2553.781834] kmem_cache_alloc+0x5b/0x310 [ 2553.782710] security_inode_alloc+0x34/0x160 [ 2553.783653] inode_init_always+0xa4e/0xd10 [ 2553.784569] alloc_inode+0x84/0x240 [ 2553.785356] new_inode_pseudo+0x14/0xe0 [ 2553.786210] sock_alloc+0x3c/0x270 [ 2553.786969] __sock_create+0xbd/0x7f0 [ 2553.787782] ? wait_for_completion_io+0x270/0x270 [ 2553.788830] __sys_socket+0xef/0x200 [ 2553.789614] ? fput_many+0x2f/0x1a0 [ 2553.790384] ? move_addr_to_kernel+0x70/0x70 [ 2553.791310] ? ksys_write+0x1a9/0x260 [ 2553.792115] ? __ia32_sys_read+0xb0/0xb0 [ 2553.792990] __x64_sys_socket+0x6f/0xb0 [ 2553.793833] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2553.794916] do_syscall_64+0x33/0x40 [ 2553.795699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2553.796788] RIP: 0033:0x7faf8a05d197 [ 2553.797577] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2553.801479] RSP: 002b:00007faf875d0098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 2553.803088] RAX: ffffffffffffffda RBX: 00007faf8a16ef60 RCX: 00007faf8a05d197 [ 2553.804634] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2553.806144] RBP: 00007faf875d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2553.807651] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 2553.809170] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 2553.811001] socket: no more sockets [ 2553.815743] Module has invalid ELF structures 10:11:59 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2553.828469] Module has invalid ELF structures [ 2553.966200] Module has invalid ELF structures [ 2554.005405] Module has invalid ELF structures 10:12:22 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c00) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:12:22 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:12:22 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:12:22 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000002c0)={0x9, 0x2f3}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) accept$inet(r2, 0x0, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) 10:12:22 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 12) 10:12:22 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 4) 10:12:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x4000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:12:22 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x0, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2577.432142] Module has invalid ELF structures [ 2577.433164] Module has invalid ELF structures [ 2577.442688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:22 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2577.473127] FAULT_INJECTION: forcing a failure. [ 2577.473127] name failslab, interval 1, probability 0, space 0, times 0 [ 2577.475495] CPU: 1 PID: 23701 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2577.476750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2577.478287] Call Trace: [ 2577.478860] dump_stack+0x107/0x167 [ 2577.479506] should_fail.cold+0x5/0xa [ 2577.480223] ? create_object.isra.0+0x3a/0xa20 [ 2577.481194] should_failslab+0x5/0x20 [ 2577.481815] kmem_cache_alloc+0x5b/0x310 [ 2577.482514] create_object.isra.0+0x3a/0xa20 [ 2577.483379] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2577.484407] kmem_cache_alloc+0x159/0x310 [ 2577.485091] security_inode_alloc+0x34/0x160 [ 2577.485983] inode_init_always+0xa4e/0xd10 [ 2577.486763] alloc_inode+0x84/0x240 [ 2577.487547] new_inode_pseudo+0x14/0xe0 [ 2577.488257] sock_alloc+0x3c/0x270 [ 2577.488835] __sock_create+0xbd/0x7f0 [ 2577.489445] ? wait_for_completion_io+0x270/0x270 [ 2577.490317] __sys_socket+0xef/0x200 [ 2577.490940] ? move_addr_to_kernel+0x70/0x70 [ 2577.491833] ? ksys_write+0x1a9/0x260 [ 2577.492625] ? __ia32_sys_read+0xb0/0xb0 [ 2577.493279] __x64_sys_socket+0x6f/0xb0 [ 2577.493920] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2577.494741] do_syscall_64+0x33/0x40 [ 2577.495336] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2577.496141] RIP: 0033:0x7faf8a05d197 [ 2577.496738] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2577.499596] RSP: 002b:00007faf875d0098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 2577.500810] RAX: ffffffffffffffda RBX: 00007faf8a16ef60 RCX: 00007faf8a05d197 [ 2577.501965] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2577.503106] RBP: 00007faf875d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2577.504245] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 2577.505400] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 2577.516493] FAULT_INJECTION: forcing a failure. [ 2577.516493] name failslab, interval 1, probability 0, space 0, times 0 [ 2577.518529] CPU: 1 PID: 23702 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2577.519770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2577.521399] Call Trace: [ 2577.521872] dump_stack+0x107/0x167 [ 2577.522511] should_fail.cold+0x5/0xa [ 2577.523101] ? create_object.isra.0+0x3a/0xa20 [ 2577.523813] should_failslab+0x5/0x20 [ 2577.524418] kmem_cache_alloc+0x5b/0x310 [ 2577.525051] ? l2cap_sock_accept+0x530/0x530 [ 2577.525749] create_object.isra.0+0x3a/0xa20 [ 2577.526467] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2577.527279] __kmalloc+0x16e/0x390 [ 2577.527858] io_connect+0x3b1/0x610 [ 2577.528456] ? io_prep_rw+0x1050/0x1050 [ 2577.529120] ? __lock_acquire+0xbb1/0x5b00 [ 2577.529800] io_issue_sqe+0x1611/0x77b0 [ 2577.530434] ? perf_trace_lock+0xac/0x490 [ 2577.531092] ? lock_chain_count+0x20/0x20 [ 2577.531758] ? io_connect+0x610/0x610 [ 2577.532372] ? lock_acquire+0x197/0x470 [ 2577.533008] ? find_held_lock+0x2c/0x110 [ 2577.533655] ? __fget_files+0x2cf/0x520 [ 2577.534285] ? lock_downgrade+0x6d0/0x6d0 [ 2577.534950] __io_queue_sqe+0x90/0x9d0 [ 2577.535565] ? io_issue_sqe+0x77b0/0x77b0 [ 2577.536221] ? __fget_files+0x2f8/0x520 [ 2577.536867] io_submit_sqes+0x44aa/0x8610 [ 2577.537539] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2577.538327] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2577.539079] ? find_held_lock+0x2c/0x110 [ 2577.539718] ? io_submit_sqes+0x8610/0x8610 [ 2577.540396] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2577.541151] ? wait_for_completion_io+0x270/0x270 [ 2577.541905] ? rcu_read_lock_any_held+0x75/0xa0 [ 2577.542627] ? vfs_write+0x354/0xb10 [ 2577.543201] ? fput_many+0x2f/0x1a0 [ 2577.543772] ? ksys_write+0x1a9/0x260 [ 2577.544379] ? __ia32_sys_read+0xb0/0xb0 [ 2577.545020] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2577.545845] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2577.546641] do_syscall_64+0x33/0x40 [ 2577.547221] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2577.548029] RIP: 0033:0x7f133173ab19 [ 2577.548615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2577.551479] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2577.552675] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2577.553774] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2577.554882] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2577.555992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2577.556904] Module has invalid ELF structures [ 2577.557127] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 [ 2577.592946] Module has invalid ELF structures 10:12:23 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x0, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:12:23 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:12:23 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:12:23 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xab0d0000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:12:23 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x5000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2577.692003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2577.693854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2577.698655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2577.738420] Module has invalid ELF structures 10:12:23 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 5) [ 2577.780106] Module has invalid ELF structures 10:12:23 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x0, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2577.902869] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2577.912652] FAULT_INJECTION: forcing a failure. [ 2577.912652] name failslab, interval 1, probability 0, space 0, times 0 [ 2577.914166] CPU: 1 PID: 24180 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2577.915187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2577.916369] Call Trace: [ 2577.916702] dump_stack+0x107/0x167 [ 2577.917181] should_fail.cold+0x5/0xa [ 2577.917833] ? sk_prot_alloc+0x11d/0x2c0 [ 2577.918365] should_failslab+0x5/0x20 [ 2577.918993] __kmalloc+0x72/0x390 [ 2577.919549] sk_prot_alloc+0x11d/0x2c0 [ 2577.920171] sk_alloc+0x30/0x350 [ 2577.920690] __netlink_create+0x63/0x340 [ 2577.921199] netlink_create+0x3b2/0x5e0 [ 2577.921699] ? genl_start+0x670/0x670 [ 2577.922201] __sock_create+0x358/0x7f0 [ 2577.922859] __sys_socket+0xef/0x200 [ 2577.923335] ? fput_many+0x2f/0x1a0 [ 2577.923878] ? move_addr_to_kernel+0x70/0x70 [ 2577.924596] ? ksys_write+0x1a9/0x260 [ 2577.925171] ? __ia32_sys_read+0xb0/0xb0 [ 2577.925768] __x64_sys_socket+0x6f/0xb0 [ 2577.926263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2577.926900] do_syscall_64+0x33/0x40 [ 2577.927361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2577.927988] RIP: 0033:0x7faf8a05d197 [ 2577.928451] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2577.930705] RSP: 002b:00007faf875d0098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 2577.931643] RAX: ffffffffffffffda RBX: 00007faf8a16ef60 RCX: 00007faf8a05d197 [ 2577.932527] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2577.933409] RBP: 00007faf875d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2577.934285] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 2577.935163] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 2577.970771] Module has invalid ELF structures 10:12:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:12:41 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 13) 10:12:41 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000004c0)={@loopback, 0x1d}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000080)={@local, 0x78, r3}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8916, &(0x7f0000000100)={@mcast1, 0x0, r3}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xac, 0x13, 0x400, 0x70bd2d, 0x25dfdbff, {0x15, 0x9e, 0x5, 0x3e, {0x4e24, 0x4e24, [0x5, 0x80, 0x7, 0x1], [0xfff, 0x2, 0x3, 0x8], r3, [0x0, 0x7]}, 0x3, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xb, 0x1, "8c5d14ca7613a3"}, @INET_DIAG_REQ_BYTECODE={0x54, 0x1, "9cb0a60b6a57da9d360d1980b21c742168957b1b7270c743b4d264a8a369a7f31382dd0e73aade3ae87a78526b571240a835b80fe03294cc4925a521931ebbc2044c5065c5ced00fd51a9a4d6551854b"}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r3, 0xee01}, {@in6=@private2, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x800000000, 0x3ff}, {0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)={0x510, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1431}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x3, 0x1f, 0x400}, {0x4, 0xff, 0xf7, 0x7fffffff}, {0x6, 0x9}, {0x5, 0x8, 0x2}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7000000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xead}}}]}}]}, 0x510}}, 0x40000) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) r5 = memfd_create(&(0x7f0000000340)='\x00', 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r6 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r6, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r5, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:12:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x6000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:12:41 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xffffe000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:12:41 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x4a0e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:12:41 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:12:41 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 6) [ 2595.968071] FAULT_INJECTION: forcing a failure. [ 2595.968071] name failslab, interval 1, probability 0, space 0, times 0 [ 2595.971104] CPU: 1 PID: 24248 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2595.972853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2595.974757] Call Trace: [ 2595.975375] dump_stack+0x107/0x167 [ 2595.976218] should_fail.cold+0x5/0xa [ 2595.977161] ? __io_queue_sqe+0x666/0x9d0 [ 2595.978243] should_failslab+0x5/0x20 [ 2595.979260] kmem_cache_alloc_trace+0x55/0x320 [ 2595.980310] ? lock_downgrade+0x6d0/0x6d0 [ 2595.981282] __io_queue_sqe+0x666/0x9d0 [ 2595.982202] ? io_issue_sqe+0x77b0/0x77b0 [ 2595.983148] ? __fget_files+0x2f8/0x520 [ 2595.984077] io_submit_sqes+0x44aa/0x8610 [ 2595.985071] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2595.986210] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2595.987318] ? find_held_lock+0x2c/0x110 [ 2595.988256] ? io_submit_sqes+0x8610/0x8610 [ 2595.989279] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2595.990532] ? wait_for_completion_io+0x270/0x270 [ 2595.991727] ? rcu_read_lock_any_held+0x75/0xa0 [ 2595.992883] ? vfs_write+0x354/0xb10 [ 2595.993730] ? fput_many+0x2f/0x1a0 [ 2595.994557] ? ksys_write+0x1a9/0x260 [ 2595.995430] ? __ia32_sys_read+0xb0/0xb0 [ 2595.996366] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2595.997554] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2595.998742] do_syscall_64+0x33/0x40 [ 2595.999599] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2596.000787] RIP: 0033:0x7f133173ab19 [ 2596.001645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2596.005902] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2596.007660] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2596.009307] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2596.010967] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2596.012641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2596.014315] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 [ 2596.029483] Module has invalid ELF structures [ 2596.035365] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2596.087842] FAULT_INJECTION: forcing a failure. [ 2596.087842] name failslab, interval 1, probability 0, space 0, times 0 [ 2596.090452] CPU: 1 PID: 24263 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2596.091934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2596.093701] Call Trace: [ 2596.094265] dump_stack+0x107/0x167 [ 2596.095047] should_fail.cold+0x5/0xa [ 2596.095860] ? create_object.isra.0+0x3a/0xa20 [ 2596.096832] should_failslab+0x5/0x20 [ 2596.097640] kmem_cache_alloc+0x5b/0x310 [ 2596.098511] create_object.isra.0+0x3a/0xa20 [ 2596.099437] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2596.100523] __kmalloc+0x16e/0x390 [ 2596.101282] sk_prot_alloc+0x11d/0x2c0 [ 2596.102109] sk_alloc+0x30/0x350 [ 2596.102833] __netlink_create+0x63/0x340 [ 2596.103699] netlink_create+0x3b2/0x5e0 [ 2596.104551] ? genl_start+0x670/0x670 [ 2596.105361] __sock_create+0x358/0x7f0 [ 2596.106194] __sys_socket+0xef/0x200 [ 2596.106976] ? fput_many+0x2f/0x1a0 [ 2596.107756] ? move_addr_to_kernel+0x70/0x70 [ 2596.108694] ? ksys_write+0x1a9/0x260 [ 2596.109501] ? __ia32_sys_read+0xb0/0xb0 [ 2596.110371] __x64_sys_socket+0x6f/0xb0 [ 2596.111214] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2596.112298] do_syscall_64+0x33/0x40 [ 2596.113104] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2596.114195] RIP: 0033:0x7faf8a05d197 [ 2596.114987] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2596.118909] RSP: 002b:00007faf875d0098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 2596.120535] RAX: ffffffffffffffda RBX: 00007faf8a16ef60 RCX: 00007faf8a05d197 [ 2596.122052] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2596.123562] RBP: 00007faf875d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2596.125073] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 2596.126931] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 10:12:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x7000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:12:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2596.276140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2596.277464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2596.278720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:12:41 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x7ffffffffffff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2596.310173] Module has invalid ELF structures 10:12:41 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x0, 0x0) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xfffffffffffffe3f) 10:12:41 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x80000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:12:41 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:12:41 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 7) 10:12:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2596.443141] Module has invalid ELF structures 10:12:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x18000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2596.538727] Module has invalid ELF structures [ 2596.549947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2596.608191] FAULT_INJECTION: forcing a failure. [ 2596.608191] name failslab, interval 1, probability 0, space 0, times 0 [ 2596.610870] CPU: 1 PID: 25096 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2596.612320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2596.614050] Call Trace: [ 2596.614602] dump_stack+0x107/0x167 [ 2596.615361] should_fail.cold+0x5/0xa [ 2596.616163] ? selinux_sk_alloc_security+0x8b/0x1b0 [ 2596.617207] should_failslab+0x5/0x20 [ 2596.617998] kmem_cache_alloc_trace+0x55/0x320 [ 2596.618955] selinux_sk_alloc_security+0x8b/0x1b0 [ 2596.619974] security_sk_alloc+0x56/0xb0 [ 2596.620844] sk_prot_alloc+0x137/0x2c0 [ 2596.621655] sk_alloc+0x30/0x350 [ 2596.622367] __netlink_create+0x63/0x340 [ 2596.623227] netlink_create+0x3b2/0x5e0 [ 2596.624225] ? genl_start+0x670/0x670 [ 2596.625334] __sock_create+0x358/0x7f0 [ 2596.626169] __sys_socket+0xef/0x200 [ 2596.626958] ? fput_many+0x2f/0x1a0 [ 2596.627719] ? move_addr_to_kernel+0x70/0x70 [ 2596.628477] Module has invalid ELF structures [ 2596.628661] ? ksys_write+0x1a9/0x260 [ 2596.628685] ? __ia32_sys_read+0xb0/0xb0 [ 2596.630893] __x64_sys_socket+0x6f/0xb0 [ 2596.631732] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2596.632840] do_syscall_64+0x33/0x40 [ 2596.633741] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2596.635022] RIP: 0033:0x7faf8a05d197 [ 2596.636021] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2596.640635] RSP: 002b:00007faf875d0098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 2596.642577] RAX: ffffffffffffffda RBX: 00007faf8a16ef60 RCX: 00007faf8a05d197 [ 2596.644359] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2596.646123] RBP: 00007faf875d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2596.647911] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 2596.649711] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 10:12:58 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x200000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:12:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x8000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:12:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:12:58 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 14) 10:12:58 executing program 7: ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x40ee0, 0x40) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000180)={0x7f, 0x0, 0x9, 0xfffff000, 0x43, "8adf268d6137703ed579fcd64fe24dddd368f8", 0x4, 0x8}) fremovexattr(r2, &(0x7f0000000080)=@known='system.posix_acl_default\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:12:58 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:12:58 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 8) 10:12:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2613.604636] Module has invalid ELF structures [ 2613.627082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2613.629099] Module has invalid ELF structures [ 2613.636317] Module has invalid ELF structures [ 2613.649400] FAULT_INJECTION: forcing a failure. [ 2613.649400] name failslab, interval 1, probability 0, space 0, times 0 [ 2613.652523] CPU: 0 PID: 25324 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2613.654049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2613.655755] Call Trace: [ 2613.656314] dump_stack+0x107/0x167 [ 2613.656488] FAULT_INJECTION: forcing a failure. [ 2613.656488] name failslab, interval 1, probability 0, space 0, times 0 [ 2613.657088] should_fail.cold+0x5/0xa [ 2613.657119] ? create_object.isra.0+0x3a/0xa20 [ 2613.661136] should_failslab+0x5/0x20 [ 2613.661914] kmem_cache_alloc+0x5b/0x310 [ 2613.662802] create_object.isra.0+0x3a/0xa20 [ 2613.663708] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2613.664826] kmem_cache_alloc_trace+0x151/0x320 [ 2613.665851] selinux_sk_alloc_security+0x8b/0x1b0 [ 2613.666901] security_sk_alloc+0x56/0xb0 [ 2613.667788] sk_prot_alloc+0x137/0x2c0 [ 2613.668645] sk_alloc+0x30/0x350 [ 2613.669388] __netlink_create+0x63/0x340 [ 2613.670274] netlink_create+0x3b2/0x5e0 [ 2613.671138] ? genl_start+0x670/0x670 [ 2613.671971] __sock_create+0x358/0x7f0 [ 2613.672833] __sys_socket+0xef/0x200 [ 2613.673638] ? fput_many+0x2f/0x1a0 [ 2613.674430] ? move_addr_to_kernel+0x70/0x70 [ 2613.675387] ? ksys_write+0x1a9/0x260 [ 2613.676214] ? __ia32_sys_read+0xb0/0xb0 [ 2613.677115] __x64_sys_socket+0x6f/0xb0 [ 2613.677983] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2613.679104] do_syscall_64+0x33/0x40 [ 2613.679916] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2613.681036] RIP: 0033:0x7faf8a05d197 [ 2613.681845] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2613.685860] RSP: 002b:00007faf875d0098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 2613.687513] RAX: ffffffffffffffda RBX: 00007faf8a16ef60 RCX: 00007faf8a05d197 [ 2613.689074] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2613.690629] RBP: 00007faf875d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2613.692180] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 2613.693737] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 2613.695350] CPU: 1 PID: 25314 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2613.696916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2613.698723] Call Trace: [ 2613.699305] dump_stack+0x107/0x167 [ 2613.700100] should_fail.cold+0x5/0xa [ 2613.700965] ? create_object.isra.0+0x3a/0xa20 [ 2613.701967] should_failslab+0x5/0x20 [ 2613.702797] kmem_cache_alloc+0x5b/0x310 [ 2613.703686] create_object.isra.0+0x3a/0xa20 [ 2613.704666] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2613.705780] kmem_cache_alloc_trace+0x151/0x320 [ 2613.706794] ? lock_downgrade+0x6d0/0x6d0 [ 2613.707706] __io_queue_sqe+0x666/0x9d0 [ 2613.708611] ? io_issue_sqe+0x77b0/0x77b0 [ 2613.709514] ? __fget_files+0x2f8/0x520 [ 2613.710399] io_submit_sqes+0x44aa/0x8610 [ 2613.711333] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2613.712429] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2613.713504] ? find_held_lock+0x2c/0x110 [ 2613.714395] ? io_submit_sqes+0x8610/0x8610 [ 2613.715341] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2613.716394] ? wait_for_completion_io+0x270/0x270 [ 2613.717472] ? rcu_read_lock_any_held+0x75/0xa0 [ 2613.718484] ? vfs_write+0x354/0xb10 [ 2613.719295] ? fput_many+0x2f/0x1a0 [ 2613.720088] ? ksys_write+0x1a9/0x260 [ 2613.720452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2613.720939] ? __ia32_sys_read+0xb0/0xb0 [ 2613.720963] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2613.720994] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2613.722545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2613.723399] do_syscall_64+0x33/0x40 [ 2613.723422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2613.725067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2613.725663] RIP: 0033:0x7f133173ab19 [ 2613.725682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2613.725692] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2613.736946] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2613.738497] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2613.740058] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2613.741654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2613.743197] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 10:12:59 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x20000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:12:59 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:12:59 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xe0ffff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:12:59 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xb50d0000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:12:59 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 9) [ 2613.979471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2614.014190] Module has invalid ELF structures [ 2614.038575] FAULT_INJECTION: forcing a failure. [ 2614.038575] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.041072] CPU: 0 PID: 25721 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2614.042587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.044372] Call Trace: [ 2614.044967] dump_stack+0x107/0x167 [ 2614.045774] should_fail.cold+0x5/0xa [ 2614.046617] ? __d_alloc+0x2a/0x990 [ 2614.047419] should_failslab+0x5/0x20 [ 2614.048256] kmem_cache_alloc+0x5b/0x310 [ 2614.049152] ? expand_files+0x635/0xb30 [ 2614.050036] __d_alloc+0x2a/0x990 [ 2614.050798] ? alloc_fd+0x2e7/0x670 [ 2614.051607] d_alloc_pseudo+0x19/0x70 [ 2614.052453] alloc_file_pseudo+0xce/0x250 [ 2614.053365] ? alloc_file+0x5a0/0x5a0 [ 2614.054203] ? do_raw_spin_unlock+0x4f/0x220 [ 2614.055154] ? _raw_spin_unlock+0x1a/0x30 [ 2614.056049] ? alloc_fd+0x2e7/0x670 [ 2614.056849] sock_alloc_file+0x4f/0x1a0 [ 2614.057713] __sys_socket+0x13d/0x200 [ 2614.058531] ? fput_many+0x2f/0x1a0 [ 2614.059314] ? move_addr_to_kernel+0x70/0x70 [ 2614.060267] ? ksys_write+0x1a9/0x260 [ 2614.061099] ? __ia32_sys_read+0xb0/0xb0 [ 2614.061985] __x64_sys_socket+0x6f/0xb0 [ 2614.062841] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2614.063953] do_syscall_64+0x33/0x40 [ 2614.064766] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2614.065878] RIP: 0033:0x7faf8a05d197 [ 2614.066691] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2614.070680] RSP: 002b:00007faf875d0098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 2614.072341] RAX: ffffffffffffffda RBX: 00007faf8a16ef60 RCX: 00007faf8a05d197 [ 2614.073892] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2614.075436] RBP: 00007faf875d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2614.077046] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 2614.078606] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 2614.106043] Module has invalid ELF structures 10:13:15 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:13:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xffffe000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:13:15 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 15) 10:13:15 executing program 7: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4000000002, 0x5}, 0x4, 0x0, 0x400000, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000140)=0x5) close_range(r1, 0xffffffffffffffff, 0x2) r3 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r1, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) finit_module(r3, &(0x7f0000000180)='\x00', 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r3, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) close(r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00n\x00', @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) 10:13:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}}, 0x0) 10:13:15 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xe0ffff00000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:13:15 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 10) 10:13:15 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}}, 0x0) [ 2630.311454] FAULT_INJECTION: forcing a failure. [ 2630.311454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2630.313370] CPU: 0 PID: 26047 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2630.314339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2630.315476] Call Trace: [ 2630.315843] dump_stack+0x107/0x167 [ 2630.316347] should_fail.cold+0x5/0xa [ 2630.316885] _copy_from_user+0x2e/0x1b0 [ 2630.317438] move_addr_to_kernel.part.0+0x31/0x110 [ 2630.318129] move_addr_to_kernel+0x4f/0x70 [ 2630.318713] io_connect+0x47a/0x610 [ 2630.319219] ? io_prep_rw+0x1050/0x1050 [ 2630.319788] ? __lock_acquire+0xbb1/0x5b00 [ 2630.320391] io_issue_sqe+0x1611/0x77b0 [ 2630.320951] ? find_held_lock+0x2c/0x110 [ 2630.321510] ? perf_trace_lock+0xac/0x490 [ 2630.322083] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2630.322740] ? io_connect+0x610/0x610 [ 2630.323275] ? lock_acquire+0x197/0x470 [ 2630.323828] ? find_held_lock+0x2c/0x110 [ 2630.324394] ? __fget_files+0x2cf/0x520 [ 2630.324957] ? lock_downgrade+0x6d0/0x6d0 [ 2630.325534] __io_queue_sqe+0x90/0x9d0 [ 2630.326076] ? io_issue_sqe+0x77b0/0x77b0 [ 2630.326656] ? __fget_files+0x2f8/0x520 [ 2630.327223] io_submit_sqes+0x44aa/0x8610 [ 2630.327817] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2630.328522] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2630.329196] ? find_held_lock+0x2c/0x110 [ 2630.329764] ? io_submit_sqes+0x8610/0x8610 [ 2630.330365] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2630.331037] ? wait_for_completion_io+0x270/0x270 [ 2630.331704] ? rcu_read_lock_any_held+0x75/0xa0 [ 2630.332345] ? vfs_write+0x354/0xb10 [ 2630.332867] ? fput_many+0x2f/0x1a0 [ 2630.333378] ? ksys_write+0x1a9/0x260 [ 2630.333907] ? __ia32_sys_read+0xb0/0xb0 [ 2630.334474] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2630.335197] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2630.335910] do_syscall_64+0x33/0x40 [ 2630.336428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2630.337139] RIP: 0033:0x7f133173ab19 [ 2630.337650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2630.340362] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2630.341426] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2630.342413] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2630.343402] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2630.344385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2630.345394] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 [ 2630.383429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2630.398355] FAULT_INJECTION: forcing a failure. [ 2630.398355] name failslab, interval 1, probability 0, space 0, times 0 [ 2630.400033] CPU: 0 PID: 26052 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2630.401032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2630.402200] Call Trace: [ 2630.402585] dump_stack+0x107/0x167 [ 2630.403104] should_fail.cold+0x5/0xa [ 2630.403649] ? create_object.isra.0+0x3a/0xa20 [ 2630.404296] should_failslab+0x5/0x20 [ 2630.404843] kmem_cache_alloc+0x5b/0x310 [ 2630.405432] create_object.isra.0+0x3a/0xa20 [ 2630.406061] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2630.406784] kmem_cache_alloc+0x159/0x310 [ 2630.407465] __d_alloc+0x2a/0x990 [ 2630.408030] ? alloc_fd+0x2e7/0x670 [ 2630.408560] d_alloc_pseudo+0x19/0x70 [ 2630.409095] alloc_file_pseudo+0xce/0x250 [ 2630.409678] ? alloc_file+0x5a0/0x5a0 [ 2630.410216] ? do_raw_spin_unlock+0x4f/0x220 [ 2630.410835] ? _raw_spin_unlock+0x1a/0x30 [ 2630.411418] ? alloc_fd+0x2e7/0x670 [ 2630.411938] sock_alloc_file+0x4f/0x1a0 [ 2630.412515] __sys_socket+0x13d/0x200 [ 2630.413051] ? fput_many+0x2f/0x1a0 [ 2630.413568] ? move_addr_to_kernel+0x70/0x70 [ 2630.414188] ? ksys_write+0x1a9/0x260 [ 2630.414730] ? __ia32_sys_read+0xb0/0xb0 [ 2630.415308] __x64_sys_socket+0x6f/0xb0 [ 2630.415871] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2630.416619] do_syscall_64+0x33/0x40 [ 2630.417142] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2630.417878] RIP: 0033:0x7faf8a05d197 [ 2630.418403] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2630.421017] RSP: 002b:00007faf875d0098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 2630.422102] RAX: ffffffffffffffda RBX: 00007faf8a16ef60 RCX: 00007faf8a05d197 [ 2630.423119] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2630.424125] RBP: 00007faf875d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2630.425138] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 2630.426137] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 2630.428650] Module has invalid ELF structures [ 2630.430380] Module has invalid ELF structures 10:13:15 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}}, 0x0) 10:13:15 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x100000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2630.566842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2630.568578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2630.569720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2630.602493] Module has invalid ELF structures [ 2630.609501] Module has invalid ELF structures 10:13:16 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:13:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x7ffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:13:16 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}}, 0x0) 10:13:16 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 11) 10:13:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:13:16 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}}, 0x0) 10:13:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x200000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:13:16 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 16) [ 2630.842686] Module has invalid ELF structures [ 2630.868395] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2630.912921] Module has invalid ELF structures [ 2630.913913] FAULT_INJECTION: forcing a failure. [ 2630.913913] name failslab, interval 1, probability 0, space 0, times 0 [ 2630.915412] CPU: 0 PID: 26621 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2630.916281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2630.917331] Call Trace: [ 2630.917680] dump_stack+0x107/0x167 [ 2630.918141] should_fail.cold+0x5/0xa [ 2630.918622] ? __alloc_file+0x21/0x320 [ 2630.919109] should_failslab+0x5/0x20 [ 2630.919586] kmem_cache_alloc+0x5b/0x310 [ 2630.920100] __alloc_file+0x21/0x320 [ 2630.920573] alloc_empty_file+0x6d/0x170 [ 2630.921089] alloc_file+0x5e/0x5a0 [ 2630.921534] alloc_file_pseudo+0x16a/0x250 [ 2630.922057] ? alloc_file+0x5a0/0x5a0 [ 2630.922529] ? do_raw_spin_unlock+0x4f/0x220 [ 2630.923082] ? _raw_spin_unlock+0x1a/0x30 [ 2630.923594] ? alloc_fd+0x2e7/0x670 [ 2630.924049] sock_alloc_file+0x4f/0x1a0 [ 2630.924549] __sys_socket+0x13d/0x200 [ 2630.925021] ? fput_many+0x2f/0x1a0 [ 2630.925471] ? move_addr_to_kernel+0x70/0x70 [ 2630.926024] ? ksys_write+0x1a9/0x260 [ 2630.926504] ? __ia32_sys_read+0xb0/0xb0 [ 2630.927018] __x64_sys_socket+0x6f/0xb0 [ 2630.927509] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2630.928155] do_syscall_64+0x33/0x40 [ 2630.928626] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2630.929272] RIP: 0033:0x7faf8a05d197 [ 2630.929733] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2630.932037] RSP: 002b:00007faf875d0098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 2630.932984] RAX: ffffffffffffffda RBX: 00007faf8a16ef60 RCX: 00007faf8a05d197 [ 2630.933863] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2630.934751] RBP: 00007faf875d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2630.935641] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 2630.936733] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 2631.037671] FAULT_INJECTION: forcing a failure. [ 2631.037671] name failslab, interval 1, probability 0, space 0, times 0 [ 2631.040484] CPU: 1 PID: 26765 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2631.042079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2631.044008] Call Trace: [ 2631.044645] dump_stack+0x107/0x167 [ 2631.045488] should_fail.cold+0x5/0xa [ 2631.046370] ? io_connect+0x3b1/0x610 [ 2631.047259] should_failslab+0x5/0x20 [ 2631.048147] __kmalloc+0x72/0x390 [ 2631.048974] io_connect+0x3b1/0x610 [ 2631.049814] ? io_prep_rw+0x1050/0x1050 [ 2631.050756] ? __lock_acquire+0xbb1/0x5b00 [ 2631.051741] io_issue_sqe+0x1611/0x77b0 [ 2631.052679] ? find_held_lock+0x2c/0x110 [ 2631.053618] ? perf_trace_lock+0xac/0x490 [ 2631.054568] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2631.055663] ? io_connect+0x610/0x610 [ 2631.056552] ? lock_acquire+0x197/0x470 [ 2631.057463] ? find_held_lock+0x2c/0x110 [ 2631.058418] ? __fget_files+0x2cf/0x520 [ 2631.059332] ? lock_downgrade+0x6d0/0x6d0 [ 2631.060292] __io_queue_sqe+0x90/0x9d0 [ 2631.061204] ? io_issue_sqe+0x77b0/0x77b0 [ 2631.062155] ? __fget_files+0x2f8/0x520 [ 2631.063088] io_submit_sqes+0x44aa/0x8610 [ 2631.064080] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2631.065236] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2631.066355] ? find_held_lock+0x2c/0x110 [ 2631.067308] ? io_submit_sqes+0x8610/0x8610 [ 2631.068311] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2631.069425] ? wait_for_completion_io+0x270/0x270 [ 2631.070551] ? rcu_read_lock_any_held+0x75/0xa0 [ 2631.071613] ? vfs_write+0x354/0xb10 [ 2631.072460] ? fput_many+0x2f/0x1a0 [ 2631.073300] ? ksys_write+0x1a9/0x260 [ 2631.074177] ? __ia32_sys_read+0xb0/0xb0 [ 2631.075114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2631.076315] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2631.077521] do_syscall_64+0x33/0x40 [ 2631.078368] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2631.079558] RIP: 0033:0x7f133173ab19 [ 2631.080417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2631.084684] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2631.086431] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2631.088075] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2631.089730] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2631.091387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2631.093052] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 10:13:33 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) (fail_nth: 17) 10:13:33 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000080)) r3 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:13:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x8000000000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:13:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x300000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:13:33 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 12) 10:13:33 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x3000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:13:33 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}}, 0x0) 10:13:33 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) (fail_nth: 1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2648.288601] Module has invalid ELF structures 10:13:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x400000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2648.311015] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2648.321711] Module has invalid ELF structures [ 2648.335484] Module has invalid ELF structures [ 2648.342013] FAULT_INJECTION: forcing a failure. [ 2648.342013] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.345476] CPU: 1 PID: 27013 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2648.347141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.349310] Call Trace: [ 2648.349908] dump_stack+0x107/0x167 [ 2648.350858] should_fail.cold+0x5/0xa [ 2648.351905] ? create_object.isra.0+0x3a/0xa20 [ 2648.353007] should_failslab+0x5/0x20 [ 2648.353974] kmem_cache_alloc+0x5b/0x310 [ 2648.355099] create_object.isra.0+0x3a/0xa20 [ 2648.356146] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2648.357508] kmem_cache_alloc+0x159/0x310 [ 2648.358696] __alloc_file+0x21/0x320 [ 2648.359541] alloc_empty_file+0x6d/0x170 [ 2648.360538] alloc_file+0x5e/0x5a0 [ 2648.361489] alloc_file_pseudo+0x16a/0x250 [ 2648.362666] ? alloc_file+0x5a0/0x5a0 [ 2648.363526] ? do_raw_spin_unlock+0x4f/0x220 [ 2648.364517] ? _raw_spin_unlock+0x1a/0x30 [ 2648.365574] ? alloc_fd+0x2e7/0x670 [ 2648.366600] sock_alloc_file+0x4f/0x1a0 [ 2648.367572] __sys_socket+0x13d/0x200 [ 2648.368438] ? fput_many+0x2f/0x1a0 [ 2648.369281] ? move_addr_to_kernel+0x70/0x70 [ 2648.370283] ? ksys_write+0x1a9/0x260 [ 2648.371147] ? __ia32_sys_read+0xb0/0xb0 [ 2648.372083] __x64_sys_socket+0x6f/0xb0 [ 2648.372996] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2648.374171] do_syscall_64+0x33/0x40 [ 2648.375020] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2648.376184] RIP: 0033:0x7faf8a05d197 [ 2648.377037] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2648.381284] RSP: 002b:00007faf875d0098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 2648.383062] RAX: ffffffffffffffda RBX: 00007faf8a16ef60 RCX: 00007faf8a05d197 [ 2648.384716] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2648.386401] RBP: 00007faf875d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2648.388060] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 2648.389738] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 2648.395551] FAULT_INJECTION: forcing a failure. [ 2648.395551] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.398245] CPU: 1 PID: 27050 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2648.399867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.401823] Call Trace: [ 2648.402451] dump_stack+0x107/0x167 [ 2648.403321] should_fail.cold+0x5/0xa [ 2648.404240] ? __get_vm_area_node+0xd4/0x340 [ 2648.405303] should_failslab+0x5/0x20 [ 2648.406211] kmem_cache_alloc_node_trace+0x59/0x340 [ 2648.407410] __get_vm_area_node+0xd4/0x340 [ 2648.408418] ? avc_has_perm_noaudit+0x3e0/0x3e0 [ 2648.409539] __vmalloc_node_range+0x13f/0x9e0 [ 2648.410600] ? kernel_read_file+0x6b8/0x790 [ 2648.411622] ? kernel_read_file+0x6b8/0x790 [ 2648.412668] ? selinux_kernel_read_file+0x89/0x410 [ 2648.413837] ? lock_downgrade+0x6d0/0x6d0 [ 2648.414825] ? __vmalloc_node+0x110/0x110 [ 2648.415833] ? kernel_read_file+0x6b8/0x790 [ 2648.416876] __vmalloc_node+0xb5/0x110 [ 2648.417816] ? kernel_read_file+0x6b8/0x790 [ 2648.418867] kernel_read_file+0x6b8/0x790 [ 2648.419891] ? __ia32_sys_fsconfig+0x150/0x150 [ 2648.421002] ? cap_capable+0x1cd/0x230 [ 2648.421962] kernel_read_file_from_fd+0xb8/0x110 [ 2648.423115] __do_sys_finit_module+0xe8/0x180 [ 2648.424212] ? __do_sys_init_module+0x230/0x230 [ 2648.425385] ? __ia32_sys_read+0xb0/0xb0 [ 2648.426381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2648.427657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2648.428936] ? trace_hardirqs_on+0x5b/0x180 [ 2648.429990] do_syscall_64+0x33/0x40 [ 2648.430815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2648.430854] FAULT_INJECTION: forcing a failure. [ 2648.430854] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.431887] RIP: 0033:0x7f3efdcf8b19 [ 2648.431905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2648.431916] RSP: 002b:00007f3efb26e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 2648.431934] RAX: ffffffffffffffda RBX: 00007f3efde0bf60 RCX: 00007f3efdcf8b19 [ 2648.431944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2648.431954] RBP: 00007f3efb26e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2648.431974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2648.446648] R13: 00007ffee4be85af R14: 00007f3efb26e300 R15: 0000000000022000 [ 2648.448216] CPU: 0 PID: 27008 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 2648.448636] syz-executor.6: vmalloc: allocation failure: 12 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 2648.449697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.449704] Call Trace: [ 2648.449732] dump_stack+0x107/0x167 [ 2648.449754] should_fail.cold+0x5/0xa [ 2648.449783] ? create_object.isra.0+0x3a/0xa20 [ 2648.449807] should_failslab+0x5/0x20 [ 2648.451892] ,cpuset= [ 2648.453660] kmem_cache_alloc+0x5b/0x310 [ 2648.453690] create_object.isra.0+0x3a/0xa20 [ 2648.454261] syz6 [ 2648.454986] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2648.455014] kmem_cache_alloc_trace+0x151/0x320 [ 2648.455035] ? lock_downgrade+0x6d0/0x6d0 [ 2648.456023] ,mems_allowed=0 [ 2648.456973] __io_queue_sqe+0x666/0x9d0 [ 2648.457001] ? io_issue_sqe+0x77b0/0x77b0 [ 2648.457821] [ 2648.458294] ? __fget_files+0x2f8/0x520 [ 2648.458331] io_submit_sqes+0x44aa/0x8610 [ 2648.467680] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2648.468728] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2648.469737] ? find_held_lock+0x2c/0x110 [ 2648.470592] ? io_submit_sqes+0x8610/0x8610 [ 2648.471504] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2648.472521] ? wait_for_completion_io+0x270/0x270 [ 2648.473580] ? rcu_read_lock_any_held+0x75/0xa0 [ 2648.474558] ? vfs_write+0x354/0xb10 [ 2648.475343] ? fput_many+0x2f/0x1a0 [ 2648.476107] ? ksys_write+0x1a9/0x260 [ 2648.476932] ? __ia32_sys_read+0xb0/0xb0 [ 2648.477796] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2648.478896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2648.479996] do_syscall_64+0x33/0x40 [ 2648.480795] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2648.481873] RIP: 0033:0x7f133173ab19 [ 2648.482655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2648.486601] RSP: 002b:00007f132ecb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2648.488201] RAX: ffffffffffffffda RBX: 00007f133184df60 RCX: 00007f133173ab19 [ 2648.489706] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2648.491204] RBP: 00007f132ecb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2648.492705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2648.494195] R13: 00007fff8b0dd8df R14: 00007f132ecb0300 R15: 0000000000022000 [ 2648.495727] CPU: 1 PID: 27050 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2648.497206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.498954] Call Trace: [ 2648.499512] dump_stack+0x107/0x167 [ 2648.500280] warn_alloc.cold+0x95/0x18a [ 2648.501128] ? zone_watermark_ok_safe+0x260/0x260 [ 2648.502162] ? __get_vm_area_node+0xd4/0x340 [ 2648.503094] ? __kasan_kmalloc.constprop.0+0xa2/0xd0 [ 2648.504173] ? __get_vm_area_node+0x262/0x340 [ 2648.505133] __vmalloc_node_range+0x58f/0x9e0 [ 2648.506085] ? kernel_read_file+0x6b8/0x790 [ 2648.506989] ? selinux_kernel_read_file+0x89/0x410 [ 2648.508015] ? lock_downgrade+0x6d0/0x6d0 [ 2648.508903] ? __vmalloc_node+0x110/0x110 [ 2648.509785] ? kernel_read_file+0x6b8/0x790 [ 2648.510694] __vmalloc_node+0xb5/0x110 [ 2648.511509] ? kernel_read_file+0x6b8/0x790 [ 2648.512431] kernel_read_file+0x6b8/0x790 [ 2648.513311] ? __ia32_sys_fsconfig+0x150/0x150 [ 2648.514274] ? cap_capable+0x1cd/0x230 [ 2648.515104] kernel_read_file_from_fd+0xb8/0x110 [ 2648.516102] __do_sys_finit_module+0xe8/0x180 [ 2648.517062] ? __do_sys_init_module+0x230/0x230 [ 2648.518067] ? __ia32_sys_read+0xb0/0xb0 [ 2648.518929] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2648.520032] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2648.521117] ? trace_hardirqs_on+0x5b/0x180 [ 2648.522028] do_syscall_64+0x33/0x40 [ 2648.522825] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2648.523909] RIP: 0033:0x7f3efdcf8b19 [ 2648.524699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2648.528594] RSP: 002b:00007f3efb26e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 2648.530198] RAX: ffffffffffffffda RBX: 00007f3efde0bf60 RCX: 00007f3efdcf8b19 [ 2648.531695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2648.533207] RBP: 00007f3efb26e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2648.534709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2648.536205] R13: 00007ffee4be85af R14: 00007f3efb26e300 R15: 0000000000022000 [ 2648.537837] Mem-Info: [ 2648.538420] active_anon:171 inactive_anon:62297 isolated_anon:0 [ 2648.538420] active_file:22862 inactive_file:58007 isolated_file:0 [ 2648.538420] unevictable:0 dirty:88 writeback:0 [ 2648.538420] slab_reclaimable:9703 slab_unreclaimable:70313 [ 2648.538420] mapped:81409 shmem:249 pagetables:6443 bounce:0 [ 2648.538420] free:96203 free_pcp:355 free_cma:0 [ 2648.545140] Node 0 active_anon:684kB inactive_anon:249188kB active_file:91448kB inactive_file:232028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:325636kB dirty:352kB writeback:0kB shmem:996kB writeback_tmp:0kB kernel_stack:9728kB all_unreclaimable? no [ 2648.550162] Node 0 DMA free:15908kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2648.555880] lowmem_reserve[]: 0 1616 1616 1616 [ 2648.556997] Node 0 DMA32 free:368600kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:684kB inactive_anon:249188kB active_file:91448kB inactive_file:232028kB unevictable:0kB writepending:392kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:25772kB bounce:0kB free_pcp:1392kB local_pcp:1124kB free_cma:0kB [ 2648.563490] lowmem_reserve[]: 0 0 0 0 [ 2648.564600] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 2648.567923] Node 0 DMA32: 44*4kB (UME) 25*8kB (UME) 143*16kB (UME) 5*32kB (UME) 3*64kB (UME) 10*128kB (U) 7*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 87*4096kB (UM) = 368584kB [ 2648.572020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2648.574180] 36185 total pagecache pages [ 2648.575068] 0 pages in swap cache [ 2648.575989] Swap cache stats: add 0, delete 0, find 0/0 [ 2648.577436] Free swap = 0kB [ 2648.578120] Total swap = 0kB [ 2648.578816] 524158 pages RAM [ 2648.579501] 0 pages HighMem/MovableOnly [ 2648.580392] 105069 pages reserved [ 2648.624725] Module has invalid ELF structures [ 2648.680027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2648.681862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2648.686311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:13:34 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x4000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:13:34 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000140)) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) pread64(r2, &(0x7f0000000080)=""/35, 0x23, 0x8) r3 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:13:34 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) (fail_nth: 2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:13:34 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x20000000000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:13:34 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 13) 10:13:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) (fail_nth: 1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:13:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x500000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2648.942098] Module has invalid ELF structures [ 2648.972859] FAULT_INJECTION: forcing a failure. [ 2648.972859] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.974403] CPU: 0 PID: 27566 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2648.975277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.976315] Call Trace: [ 2648.976669] dump_stack+0x107/0x167 [ 2648.977129] should_fail.cold+0x5/0xa [ 2648.977612] ? create_object.isra.0+0x3a/0xa20 [ 2648.978186] should_failslab+0x5/0x20 [ 2648.978667] kmem_cache_alloc+0x5b/0x310 [ 2648.979180] create_object.isra.0+0x3a/0xa20 [ 2648.979735] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2648.980383] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2648.981037] __get_vm_area_node+0xd4/0x340 [ 2648.981572] ? avc_has_perm_noaudit+0x3e0/0x3e0 [ 2648.982160] __vmalloc_node_range+0x13f/0x9e0 [ 2648.982725] ? kernel_read_file+0x6b8/0x790 [ 2648.983265] ? kernel_read_file+0x6b8/0x790 [ 2648.983937] ? selinux_kernel_read_file+0x89/0x410 [ 2648.984712] ? lock_downgrade+0x6d0/0x6d0 [ 2648.985382] ? __vmalloc_node+0x110/0x110 [ 2648.986014] ? kernel_read_file+0x6b8/0x790 [ 2648.986560] __vmalloc_node+0xb5/0x110 [ 2648.987059] ? kernel_read_file+0x6b8/0x790 [ 2648.987607] kernel_read_file+0x6b8/0x790 [ 2648.988136] ? __ia32_sys_fsconfig+0x150/0x150 [ 2648.988738] ? cap_capable+0x1cd/0x230 [ 2648.989340] kernel_read_file_from_fd+0xb8/0x110 [ 2648.990111] __do_sys_finit_module+0xe8/0x180 [ 2648.990832] ? __do_sys_init_module+0x230/0x230 [ 2648.991605] ? __ia32_sys_read+0xb0/0xb0 [ 2648.992257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2648.993114] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2648.993953] ? trace_hardirqs_on+0x5b/0x180 [ 2648.994649] do_syscall_64+0x33/0x40 [ 2648.995244] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2648.996081] RIP: 0033:0x7f3efdcf8b19 [ 2648.996689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2648.999639] RSP: 002b:00007f3efb26e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 2649.000849] RAX: ffffffffffffffda RBX: 00007f3efde0bf60 RCX: 00007f3efdcf8b19 [ 2649.001983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2649.003129] RBP: 00007f3efb26e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2649.004283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2649.005434] R13: 00007ffee4be85af R14: 00007f3efb26e300 R15: 0000000000022000 [ 2649.048568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2649.136103] FAULT_INJECTION: forcing a failure. [ 2649.136103] name failslab, interval 1, probability 0, space 0, times 0 [ 2649.139461] CPU: 0 PID: 27618 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2649.141330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2649.143583] Call Trace: [ 2649.144291] dump_stack+0x107/0x167 [ 2649.145291] should_fail.cold+0x5/0xa [ 2649.146337] ? security_file_alloc+0x34/0x170 [ 2649.147558] should_failslab+0x5/0x20 [ 2649.148601] kmem_cache_alloc+0x5b/0x310 [ 2649.149708] security_file_alloc+0x34/0x170 [ 2649.150896] __alloc_file+0xb7/0x320 [ 2649.151899] alloc_empty_file+0x6d/0x170 [ 2649.153017] alloc_file+0x5e/0x5a0 [ 2649.153983] alloc_file_pseudo+0x16a/0x250 [ 2649.154957] ? alloc_file+0x5a0/0x5a0 [ 2649.155985] ? do_raw_spin_unlock+0x4f/0x220 [ 2649.157201] ? _raw_spin_unlock+0x1a/0x30 [ 2649.158321] ? alloc_fd+0x2e7/0x670 [ 2649.159323] sock_alloc_file+0x4f/0x1a0 [ 2649.160414] __sys_socket+0x13d/0x200 [ 2649.161452] ? fput_many+0x2f/0x1a0 [ 2649.162432] ? move_addr_to_kernel+0x70/0x70 [ 2649.163624] ? ksys_write+0x1a9/0x260 [ 2649.164676] ? __ia32_sys_read+0xb0/0xb0 [ 2649.165630] __x64_sys_socket+0x6f/0xb0 [ 2649.166710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2649.168090] do_syscall_64+0x33/0x40 [ 2649.169186] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2649.170474] RIP: 0033:0x7faf8a05d197 [ 2649.171413] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2649.175909] RSP: 002b:00007faf875d0098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 2649.177683] RAX: ffffffffffffffda RBX: 00007faf8a16ef60 RCX: 00007faf8a05d197 [ 2649.179332] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2649.180984] RBP: 00007faf875d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2649.182670] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 2649.184310] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 [ 2649.241612] Module has invalid ELF structures [ 2649.282040] Module has invalid ELF structures 10:13:50 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x0, 0x0, 0x0) 10:13:50 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) 10:13:50 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xe0ffff00000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:13:50 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x5000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:13:50 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:13:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:13:50 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x600000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:13:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 14) [ 2664.951924] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2664.957181] Module has invalid ELF structures [ 2664.961966] Module has invalid ELF structures [ 2664.967516] Module has invalid ELF structures [ 2664.971493] Module has invalid ELF structures [ 2665.018575] FAULT_INJECTION: forcing a failure. [ 2665.018575] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.021443] CPU: 1 PID: 28066 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2665.022914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2665.024684] Call Trace: [ 2665.025248] dump_stack+0x107/0x167 [ 2665.026019] should_fail.cold+0x5/0xa [ 2665.026825] ? create_object.isra.0+0x3a/0xa20 [ 2665.027795] should_failslab+0x5/0x20 [ 2665.028597] kmem_cache_alloc+0x5b/0x310 [ 2665.029464] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2665.030638] create_object.isra.0+0x3a/0xa20 [ 2665.031568] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2665.032663] kmem_cache_alloc+0x159/0x310 [ 2665.033550] security_file_alloc+0x34/0x170 [ 2665.034468] __alloc_file+0xb7/0x320 [ 2665.035260] alloc_empty_file+0x6d/0x170 [ 2665.036117] alloc_file+0x5e/0x5a0 [ 2665.036883] alloc_file_pseudo+0x16a/0x250 [ 2665.037786] ? alloc_file+0x5a0/0x5a0 [ 2665.038596] ? do_raw_spin_unlock+0x4f/0x220 [ 2665.039527] ? _raw_spin_unlock+0x1a/0x30 [ 2665.040405] ? alloc_fd+0x2e7/0x670 [ 2665.041196] sock_alloc_file+0x4f/0x1a0 [ 2665.042042] __sys_socket+0x13d/0x200 [ 2665.042853] ? move_addr_to_kernel+0x70/0x70 [ 2665.043782] ? ksys_write+0x1a9/0x260 [ 2665.044593] ? __ia32_sys_read+0xb0/0xb0 [ 2665.045478] __x64_sys_socket+0x6f/0xb0 [ 2665.046317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2665.047405] do_syscall_64+0x33/0x40 [ 2665.048196] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2665.049290] RIP: 0033:0x7faf8a05d197 [ 2665.050078] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2665.053980] RSP: 002b:00007faf875d0098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 2665.055596] RAX: ffffffffffffffda RBX: 00007faf8a16ef60 RCX: 00007faf8a05d197 [ 2665.057119] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2665.058624] RBP: 00007faf875d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2665.060137] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000180 [ 2665.061667] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000200001c0 10:13:50 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2665.108631] Module has invalid ELF structures 10:13:50 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x6000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:13:50 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x100000000000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2665.211723] Module has invalid ELF structures [ 2665.215281] Module has invalid ELF structures 10:13:50 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:13:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:13:50 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x700000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:13:50 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {0x10000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x20002, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/prev\x00') ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000180)={0x7, 0x6, 0x6, 0x2, 0x13, "f5925401999138e61051f7ea504ca9f49ef948"}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x70}}, 0x0) r5 = fcntl$dupfd(r3, 0x406, r4) r6 = syz_io_uring_complete(0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80, 0x34) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="3d000000000000800900000001000080090000000800000000000000001000000300000054572a402864fdc2ca47dc67690e9eeda27d52a5ba7d0a9d156da7cba4ccde3b0a3dcfbee62239aaffd3637409fafa91c925f75fa87e3ca973e3762f5282e917a4cff055d185022ef7f315f575df14fbdd14c680421bc6767288bcac5634cd39d491f20d4134ac97276d43b935e8ff8994ffc13d1a0cba9a354910e742d5d5eb110d6ba18794c67b7510c665aca24bf5cf73c159a53dd237ce5f5af0e7f4e8063d6bbcfba19d25b01f4407782f680f5dafdcf1b712844c07b55f336507db4c2e"]}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2665.311936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2665.313550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2665.315328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2665.343176] Module has invalid ELF structures 10:13:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 15) [ 2665.469898] Module has invalid ELF structures [ 2665.531929] Module has invalid ELF structures [ 2665.537139] Module has invalid ELF structures [ 2665.550766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2665.576187] FAULT_INJECTION: forcing a failure. [ 2665.576187] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2665.579908] CPU: 1 PID: 28721 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2665.581509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2665.583410] Call Trace: [ 2665.584019] dump_stack+0x107/0x167 [ 2665.584859] should_fail.cold+0x5/0xa [ 2665.585740] __alloc_pages_nodemask+0x182/0x600 [ 2665.586794] ? add_mm_counter_fast+0x220/0x220 [ 2665.587832] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2665.589195] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2665.590374] ? lock_downgrade+0x6d0/0x6d0 [ 2665.591316] ? mark_held_locks+0x9e/0xe0 [ 2665.592221] alloc_pages_vma+0xbb/0x410 [ 2665.593137] handle_mm_fault+0x152f/0x3500 [ 2665.594092] ? lock_downgrade+0x6d0/0x6d0 [ 2665.595017] ? alloc_file+0x5a0/0x5a0 [ 2665.595876] ? __pmd_alloc+0x630/0x630 [ 2665.596767] ? vmacache_find+0x55/0x2a0 [ 2665.597671] do_user_addr_fault+0x56e/0xc60 [ 2665.598651] exc_page_fault+0xa2/0x1a0 [ 2665.599522] ? asm_exc_page_fault+0x8/0x30 [ 2665.600477] asm_exc_page_fault+0x1e/0x30 [ 2665.601422] RIP: 0033:0x7faf89ff9858 [ 2665.602251] Code: b9 0c 00 00 00 89 57 50 31 c9 89 d2 44 89 f7 4c 8d 44 24 14 c7 44 24 1c 00 00 00 00 48 c7 44 24 14 00 00 00 00 66 89 44 24 14 e3 4f 01 00 48 89 c6 8b 43 50 48 39 f0 74 48 40 84 ed 0f 85 79 [ 2665.606336] RSP: 002b:00007faf875d0000 EFLAGS: 00010246 [ 2665.607509] RAX: 0000000000000010 RBX: 00007faf875d00f0 RCX: 0000000000000000 [ 2665.609092] RDX: 0000000000000020 RSI: 00007faf875d0140 RDI: 0000000000000007 [ 2665.610665] RBP: 0000000000000001 R08: 00007faf875d0014 R09: 000000000000000c [ 2665.612237] R10: 00007faf8a0b5800 R11: 00007faf8a0b5801 R12: 00007faf875d0068 [ 2665.613817] R13: 00007faf875d0140 R14: 0000000000000007 R15: 0000000000000000 [ 2665.615763] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2665.688062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2665.689931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2665.692852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:14:07 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x7000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:07 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x200000000000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:07 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:14:07 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x2, 0x0, 0x0) 10:14:07 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xc00000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:14:07 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 16) 10:14:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:07 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x8000, 0x1000, 0x7, 0x7f, 0x2}) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="700000001e0075b90000000000000000fc0100000000000000000000000000000000000000000054d6900dcabd6200fe80000000000000000000000000000000000000000000002400090000000000000400000000000000000000000000000000000000000000000000000c00150000000000000000001d9d4c9a1b4a52927cda777a1bf660fd5d9b889a05d79f22bd48286ca68e45a17cb7e20256aa8b9ffc6519c5480c013b49ad2b74dc84a9df823c691093e69cbd32d646a106d10ef35778133dcd8158d51861b30ca7d8905e8445061ce3ae13e959a81c8507820819"], 0x70}}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2682.569864] Module has invalid ELF structures [ 2682.581960] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:14:08 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2682.623151] Module has invalid ELF structures [ 2682.644130] FAULT_INJECTION: forcing a failure. [ 2682.644130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2682.647041] CPU: 0 PID: 29024 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 2682.648629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2682.650428] Call Trace: [ 2682.651008] dump_stack+0x107/0x167 [ 2682.651806] should_fail.cold+0x5/0xa [ 2682.652639] _copy_from_user+0x2e/0x1b0 [ 2682.653526] move_addr_to_kernel.part.0+0x31/0x110 [ 2682.654599] __sys_sendto+0x166/0x320 [ 2682.655435] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2682.656466] ? __up_read+0x19f/0x7a0 [ 2682.657286] ? _down_write_nest_lock+0x160/0x160 [ 2682.658320] ? vmacache_find+0x55/0x2a0 [ 2682.659216] __x64_sys_sendto+0xdd/0x1b0 [ 2682.660089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2682.661193] do_syscall_64+0x33/0x40 [ 2682.661984] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2682.663081] RIP: 0033:0x7faf8a00e8ac [ 2682.663869] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2682.667813] RSP: 002b:00007faf875cffc0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2682.669453] RAX: ffffffffffffffda RBX: 00007faf875d00f0 RCX: 00007faf8a00e8ac [ 2682.670976] RDX: 0000000000000020 RSI: 00007faf875d0140 RDI: 0000000000000007 [ 2682.672503] RBP: 0000000000000000 R08: 00007faf875d0014 R09: 000000000000000c [ 2682.674032] R10: 0000000000000000 R11: 0000000000000293 R12: 00007faf875d0068 [ 2682.675558] R13: 00007faf875d0140 R14: 0000000000000007 R15: 0000000000000000 [ 2682.755667] Module has invalid ELF structures 10:14:08 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xe000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x300000000000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:08 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:14:08 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:14:08 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c00000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:14:08 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) [ 2683.065515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2683.075077] Module has invalid ELF structures [ 2683.148186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2683.149780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2683.151596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:14:08 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:08 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2683.269899] Module has invalid ELF structures [ 2683.304126] Module has invalid ELF structures 10:14:08 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:14:08 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x2, 0x0) [ 2683.443484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2683.524908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2683.525999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2683.531089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2683.555132] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2683.593005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2683.594082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2683.596533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:14:21 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x3, 0x0) 10:14:21 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x5) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:21 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xab0d000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:14:21 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x3, 0x0, 0x0) 10:14:22 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:14:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x400000000000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:22 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x4a0e0000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:22 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) r3 = epoll_create1(0x0) signalfd(r3, &(0x7f0000000140)={[0x80]}, 0x8) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) memfd_create(&(0x7f0000000080)=')}\x00', 0x2) inotify_add_watch(r4, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2696.615970] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2696.654479] Module has invalid ELF structures [ 2696.677197] Module has invalid ELF structures [ 2696.683707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2696.685138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2696.691091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2696.697705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:14:22 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2696.718109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2696.719665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2696.722677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2696.759247] Module has invalid ELF structures 10:14:22 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x4, 0x0) [ 2696.852657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:14:22 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2696.888073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2696.889696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2696.893070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2696.906029] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:14:22 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xffffffff00000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:14:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x500000000000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2696.947994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2696.949530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2696.951395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2697.042449] Module has invalid ELF structures [ 2697.045095] Module has invalid ELF structures 10:14:39 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x4, 0x0, 0x0) 10:14:39 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x600000000000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:39 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xffffe000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x6) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:39 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x5, 0x0) 10:14:39 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x214) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:14:39 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xffffffffffff0700) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:14:39 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000180)) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) read$snapshot(r3, &(0x7f0000000380)=""/239, 0xef) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2713.866537] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:14:39 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x300) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2713.908891] Module has invalid ELF structures [ 2713.910906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2713.911813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2713.914684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2713.917978] Module has invalid ELF structures [ 2713.950631] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:14:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x91010, r1, 0x5e2a7000) finit_module(r0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2713.998712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2713.999599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2714.000578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:14:39 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xac}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000013c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd, 0x0, 0xf8, 0x80000001, 0xa, 0x1, {0x3, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x9f6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x10000) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xfffffffffffffe36) 10:14:39 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x7, 0x0) [ 2714.180131] Module has invalid ELF structures 10:14:39 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x7ffffffffffff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:39 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x700000000000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:39 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x6, 0x0, 0x0) 10:14:39 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x500) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2714.374042] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:14:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x7) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2714.430617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2714.432229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2714.435592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:14:39 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2714.460972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2714.516830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2714.518539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2714.520207] Module has invalid ELF structures [ 2714.520552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:14:39 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x600) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2714.639049] Module has invalid ELF structures 10:14:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1800000000000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:57 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x8, 0x0) 10:14:57 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x8000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x7) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000380)=""/151, 0x97}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000500)=""/128, 0x80}, {&(0x7f0000000600)=""/220, 0xdc}, {&(0x7f0000000700)=""/48, 0x30}, {&(0x7f0000000740)=""/155, 0x9b}, {&(0x7f0000000800)=""/54, 0x36}], 0x8, &(0x7f00000023c0)=ANY=[@ANYBLOB="340005ed00000000009100010000000214bba4ca4ff07dc00f0925bfade7f18f3895b44a715945c18f6890acf2a31e9b51c81e57cb247490a0dd527b00609e119076510c660b9affb677311b2aba95629977e0cf315577bfd9feba03a10e0c13d81c0be8e29e76b59bdfdba102e9a51d51f42afb4aad0c534247eb51b29464145150d23a7cce2041d37d3cbccbceb9b5f9bc447d3f7dafe15c0b778b13bcdb906f1037a6eceb134c2c3a91d73e2660cbee014776b20d65ccdf68397229274a6cdf60d611280df0003f6816704e35683f1560d4a53e4f18ec17069f9856298f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/153, 0x99}, {&(0x7f0000000a80)=""/6, 0x6}, {&(0x7f0000000ac0)=""/150, 0x96}, {&(0x7f0000000b80)=""/85, 0x55}], 0x4, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/71, 0x47}, {&(0x7f0000001e00)=""/245, 0xf5}, {&(0x7f0000001d00)=""/123, 0x7b}], 0x4}}, {{&(0x7f0000001f40), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001fc0)=""/221, 0xdd}, {&(0x7f00000020c0)=""/218, 0xda}], 0x2, &(0x7f0000002200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x4, 0x40000000, &(0x7f0000002340)={0x77359400}) io_uring_enter(r2, 0x730f, 0x5307, 0x0, &(0x7f0000002380)={[0x10000]}, 0x8) r3 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) 10:14:57 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x700) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:14:57 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0xa5, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x177}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:14:57 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:57 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0xc, 0x0, 0x0) [ 2731.975999] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2732.037357] Module has invalid ELF structures [ 2732.056836] Module has invalid ELF structures [ 2732.076294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2732.078465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2732.080691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2732.099654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:14:57 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xc00) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2732.128163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2732.129874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2732.131674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:14:57 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x9, 0x0) 10:14:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) sendfile(r2, r3, &(0x7f0000000080)=0x10000, 0x3) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) 10:14:57 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x9) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:57 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x20000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:14:57 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000140), 0x6800) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:14:57 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1402) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:14:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c00000000000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2732.461356] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2732.509874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2732.511453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2732.513134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2732.548436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2732.561861] Module has invalid ELF structures [ 2732.616055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2732.617698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2732.623907] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2732.652501] Module has invalid ELF structures 10:15:14 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:15:14 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x12, 0x0, 0x0) 10:15:14 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xe0ffff00000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:15:14 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x23, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) 10:15:14 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c00) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:15:14 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0xa, 0x0) 10:15:14 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) dup2(r1, r2) r3 = memfd_create(&(0x7f0000000340)='\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f0000000300), 0x2, 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r3, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:15:14 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xb50d000000000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2748.642932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2748.721875] Module has invalid ELF structures [ 2748.734307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2748.735501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2748.737415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2748.761148] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2748.777161] Module has invalid ELF structures 10:15:14 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0xe39f724e68038493, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x5407, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xac}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r5}}, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000000007753881a07000000000000006c6530006f355a4a8e6c61107dc8cdbaa75b27b9ae3f1de772d07349ce1492a5f853ebf7af63203aba8303510ac7d8e7a1644be474a5e7afa71bd727cb7773850e662ff128670b7adb6c7731a78df74cea8a2159c88fd160ad1ee5e2d3f353cbcdc6d5d64bc5df94780ba5451bf48ad4191da1977424a13c"]) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f0000000180)='./file1\x00', 0x150, 0x40800, 0x23456}, 0xfff) r8 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r8, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2748.840542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2748.842330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2748.845990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:15:14 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:15:14 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xac}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="168052131c411bdd664dee4cfa10a8a2ba8129a3b8ac2e910e962c5ef1d8050625d1158667a17e55856b2cb75c5f2be0a05db825e7bb9d7206f79dfe81a8aed220fdb9424035f1d10c7e39a286e6dee07660e06e020b416dbf9b", 0x5a, 0x2}, {&(0x7f0000000380)="513c2ecfe9c2446726115188478fe33bc6d3424fd7f92b6872ef5dc4e5cc7af5440ca40290736d05c5c7b5bd8b6ff28d994d3e1c6a1404c356b3c8c4ae8aa8c4d8929659bee70de1e1b41fc449240a9e63806aca28b3ab7e39cf7470b8a1e49f5e15c107fd5244f58c13514e70d45bdd96dc702e631ccd3d182a0a3e2ccff512482d67f191e2bc943f90c7845e24c981edbc8a96c4bb87", 0x97, 0x2}], 0x1000080, &(0x7f0000000440)={[{@norecovery}, {@dioread_lock}, {@barrier}], [{@smackfsdef={'smackfsdef', 0x3d, 'trusted.overlay.redirect\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@fsmagic}, {@appraise}, {@dont_hash}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r4, &(0x7f0000000500)={0x121603, 0x8fcce3e844d56cf1, 0x1f}, &(0x7f0000000540)='./file1\x00', 0x18, 0x0, 0x12345}, 0x101) r5 = pidfd_getfd(r2, r0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) close_range(r5, r6, 0x0) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2749.109978] Module has invalid ELF structures 10:15:27 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x9, r3, &(0x7f0000000140)="c9b78cdcb2f8fe4f3b5afd3585c3f90ea1fd30f5037fc3b49a25d225", 0x1c, 0xffffffffffff8001, 0x0, 0x2, r2}, &(0x7f00000001c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:15:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xffffffff00000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:15:27 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11024, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x400) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r3, 0x0, 0x40, 0x1bc}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:15:27 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0xb, 0x0) 10:15:27 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x18, 0x0, 0x0) 10:15:27 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x100000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:15:27 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:15:27 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x300) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2762.439643] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2762.445902] Module has invalid ELF structures [ 2762.448839] Module has invalid ELF structures 10:15:27 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x200000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:15:27 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x7, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f0000000180)="30b6cc7792d77556fa0586876fe02bfc59d74fd9d9847c82f86a0082a2335e056afc805f6517de4383f0669b9855e79996b7dcd7671346674834245baef9ba028ab18d88990671c4de0d89c9d6b59a7dc89cd25cccb8fa4e8801f4c26b55523267901804959e0263e9fd7e042b62a4beb12bd06bf9ce2a15d47f4a04a94eb06d74f60d715bda6cf74320036c7f5c45d14e77bb170c33ca0fce0292bb960ba61a0a58873a89120c5295f6c60067a29001117842", 0xb3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:15:27 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x1e, 0x0, 0x0) [ 2762.522840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2762.524899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2762.526825] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2762.565249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:15:28 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x200000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:15:28 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x8, 0x4) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) copy_file_range(r0, &(0x7f0000000080)=0x9993, r1, 0x0, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="340200002400000426bd7000fedbdf250d00000014004a00fc020000000000000000000000000001fb0016804edd2c78be48e3a02edc37d99b0ab4bb6600000552a22c877037c99754d87c6a4fe56f5c556b4613a12dbf45f4f9a2d058541247ab5770ef2a1aa3f0afd8badfd1d8ce6d3eab7d66c2ed9eb2af20db71b06ba5603d6fe666e86d4b8a63d7c169fe4b5150823529412c0a66ee672845bfd4b89e31cd2ccc577b6539eea42f58e7b93cf9490b5076b4cc08489342e404405eca601b13de05d15ef045df9f41cdb9e7c9953d20852db97e4da9a70b6c313ba006a6e1770b80db339b680bc1dc2aaefedbba1edfce3d4cfb6d15", @ANYRES32=0x0, @ANYBLOB="14007900fe8000000000000000000000000000bb08003f00", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="3065d8c0708d96060d924d78fcf7a013c6721ecdb16f78b298d828971e7c066ff8b52144e054fe5f624b19e4caea27c6ed04ffa4b1886d05d9af7e07060080003a00000008002300", @ANYRES32=r3, @ANYBLOB="0c00340001000000000000000800700004000000000000"], 0x234}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000008) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r4, &(0x7f0000000100)='./file1\x00', 0x4000060e) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="d471a0689f02010200000000000000000200000a08000440000001010a000b00512e3933310000000800094000000005480002802c000180140003000000000000000000000000000000000014000400000000000080000000000000000000000c00028005000100380000000c00028005000100880000004c00038006000340000300001400018008000100e0000002080002007f0000012c00018014000300ff01000000000000000000000000000114000400fe80000000000000000000000000001e06000740000000000800084000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x488d0}, 0x800) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000001e4000018450000", @ANYRES32=r2, @ANYBLOB="02000000000000002e2f66696c653100"]) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f00000004c0)='\x00', &(0x7f0000000500)='./file0/file0\x00', 0xffffffffffffffff) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:15:28 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xffffffffffff0700) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2762.643515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2762.645688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2762.647426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:15:28 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0xc, 0x0) 10:15:28 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x500) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:15:28 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xe0ffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:15:28 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x24, 0x0, 0x0) 10:15:28 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x81, 0x9, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x2001, 0xcc1, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) timer_create(0xbee2d00cd4845841, 0x0, &(0x7f0000001300)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x5e, 0x4, 0x10001}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x2, 0x0) dup(r3) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0x59f}}, './file1\x00'}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0x130) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2762.805511] Module has invalid ELF structures [ 2762.813943] Module has invalid ELF structures [ 2762.822104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2762.850645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2762.851802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2762.852839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2762.866482] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:15:28 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2762.892983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2762.893889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2762.894784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2762.962881] Module has invalid ELF structures 10:15:28 executing program 0: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000180)=0x2) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000940)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xffffff2f) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7e24}}, './file1\x00'}) sendmsg$nl_generic(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x34, 0x20, 0x70bd25, 0x25dfdbfb, {0x17}, [@generic="7348452b1c2f9fb10bb1866213882be1db55e67b"]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x400000, 0x0) 10:15:28 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0xf, 0x0) 10:15:28 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x600) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:15:28 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x2a, 0x0, 0x0) 10:15:28 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x300000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2763.129345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2763.140677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2763.141804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2763.142796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2763.154289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2763.169156] Module has invalid ELF structures [ 2763.178959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2763.180840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2763.183004] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2763.190834] Module has invalid ELF structures 10:15:42 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) r3 = openat$incfs(r2, &(0x7f0000000180)='.log\x00', 0x4000, 0x142) recvmmsg(r3, &(0x7f0000007840)=[{{&(0x7f00000001c0)=@alg, 0x80, &(0x7f0000001700)=[{&(0x7f0000000380)=""/230, 0xe6}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000540)=""/158, 0x9e}], 0x5, &(0x7f0000001780)=""/100, 0x64}, 0x9}, {{&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000000300)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001880)=""/126, 0x7e}], 0x2, &(0x7f0000001900)=""/28, 0x1c}, 0x3}, {{&(0x7f0000001940)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000019c0)=""/37, 0x25}, {&(0x7f0000001a00)=""/147, 0x93}, {&(0x7f0000001ac0)=""/9, 0x9}], 0x3, &(0x7f0000001b40)=""/171, 0xab}, 0x6}, {{&(0x7f0000001c00)=@can, 0x80, &(0x7f0000004140)=[{&(0x7f0000001c80)=""/153, 0x99}, {&(0x7f0000001d40)=""/43, 0x2b}, {&(0x7f0000002e00)=""/140, 0x8c}, {&(0x7f0000002ec0)=""/95, 0x5f}, {&(0x7f0000002f40)=""/122, 0x7a}, {&(0x7f0000002fc0)=""/185, 0xb9}, {&(0x7f0000003080)=""/131, 0x83}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x8}, 0x10}, {{&(0x7f00000041c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000005240)=[{&(0x7f0000004240)=""/4096, 0x1000}], 0x1}, 0x1}, {{&(0x7f0000005280)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000006340)=[{&(0x7f0000005300)=""/23, 0x17}, {&(0x7f0000005340)=""/4096, 0x1000}], 0x2, &(0x7f0000006380)=""/255, 0xff}}, {{&(0x7f0000006480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000007600)=[{&(0x7f0000006500)=""/155, 0x9b}, {&(0x7f00000065c0)=""/47, 0x2f}, {&(0x7f0000006600)=""/4096, 0x1000}], 0x3, &(0x7f0000007640)=""/15, 0xf}, 0x4665}, {{&(0x7f0000007680)=@sco, 0x80, &(0x7f00000077c0)=[{&(0x7f0000007700)=""/180, 0xb4}], 0x1, &(0x7f0000007800)=""/35, 0x23}, 0x23e667ff}], 0x8, 0x10061, &(0x7f0000007a40)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:15:42 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:15:42 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r1}, &(0x7f0000000040)) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x151) perf_event_open(&(0x7f0000000180)={0x7, 0x80, 0xee, 0x5, 0x40, 0x17, 0x0, 0x8, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x8, 0x8, 0x20, 0x2, 0x5, 0x6, 0x7, 0x0, 0x8, 0x0, 0x5}, r1, 0x7, r2, 0xa) r3 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000b00)={r6, 0x20, 0xff, 0x1}) inotify_add_watch(r4, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) 10:15:42 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x700) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:15:42 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x400000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:15:42 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x30, 0x0, 0x0) 10:15:42 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x10, 0x0) 10:15:42 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)=0x0) r4 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a80)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) dup3(r0, r2, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000940), &(0x7f0000000a40)='./file1\x00', 0x2, 0x2000, 0x1}, 0x0) fcntl$setflags(r1, 0x2, 0x1) clone3(&(0x7f0000000740)={0x40101900, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1c}, &(0x7f0000000280)=""/104, 0x68, &(0x7f0000000300)=""/52, &(0x7f0000000580)=[r3, r3, r4, 0x0, r3], 0x5, {r2}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x5}}, './file1\x00'}) waitid$P_PIDFD(0x3, r5, &(0x7f00000007c0), 0x0, &(0x7f0000000840)) 10:15:42 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2140000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2777.257669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2777.281032] Module has invalid ELF structures [ 2777.286349] Module has invalid ELF structures [ 2777.296692] Module has invalid ELF structures [ 2777.329975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2777.331832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2777.335966] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2777.397949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:15:42 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x500000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:15:42 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x36, 0x0, 0x0) 10:15:42 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x5160, &(0x7f0000000140)={0x0, 0x6bc8, 0x8, 0x3, 0x9}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70000400000000000000000000000000fc010000000000000000000000000000000000000000eb001cf70000008797f67a9d00000000000000000000000900005480a47280a5e1cef03ee5ffff03000000000000000000000000000c0008000000000000000000000000000000000000000000000030ff7eb3ed93ebf57495d4721c38b277815e01e9a3900f605932a33a5595d08f813cc095ce7ecd9e16b75df8f2c6ef8afae6e7019debc19ee71b47299e91561873f7b8a6c12a0cb6893489f9d116b54f393b7dd79d0947ea47b21edd1452a0f7252ac87b2d05cd75bdc2c561dd801f45dfdc63d5822614bf9e936a57bfd2e2b0f6"], 0x70}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000013c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd, 0x0, 0xf8, 0x80000001, 0xa, 0x1, {0x3, r4}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @empty}, 0x3, 0x4, 0x2, 0x1}}, 0x0, 0x0, 0x1, {0x0, r4}}, 0x8001) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r5, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:15:42 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:15:42 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x3000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:15:42 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x11, 0x0) [ 2777.618501] Module has invalid ELF structures [ 2777.670109] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2777.679497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2777.680464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2777.681778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2777.695817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2777.748430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2777.749347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2777.750268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2777.824661] Module has invalid ELF structures 10:15:58 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x900) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:15:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file0\x00', 0x402, 0x40) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = openat$incfs(r2, &(0x7f0000000140)='.log\x00', 0x280000, 0x1c8) inotify_add_watch(r3, &(0x7f0000000180)='./file1\x00', 0x8) 10:15:58 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x3c, 0x0, 0x0) 10:15:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcfe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB="e9ffff23e011970018ffff00473d4ca4af44718fcf87e2ed59ebc2d2a30d02aab278020179c5f1440ee423496a5f848cdf2b7500d4eabb995443477cce2b8b57", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r4 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r4, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) 10:15:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) dup2(r2, r1) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:15:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x4000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:15:58 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x25, 0x0) 10:15:58 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x600000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:15:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x5000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2792.935700] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2792.980765] Module has invalid ELF structures [ 2792.999617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2793.011491] Module has invalid ELF structures 10:15:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) r3 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) r4 = inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) inotify_rm_watch(r3, r4) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:15:58 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x2b, 0x0) 10:15:58 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x300, 0x0, 0x0) [ 2793.218848] Module has invalid ELF structures [ 2793.226000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2793.229778] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:16:12 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x6000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:16:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x3, 0x56a, [0x20000940, 0x0, 0x0, 0x20000cfc, 0x20000d2c], 0x0, &(0x7f00000001c0), &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"/588]}, 0x5d8) r4 = socket(0x1a, 0x800, 0x7536) lseek(r4, 0x8, 0x4) r5 = openat(r2, &(0x7f0000000140)='./file1\x00', 0x101081, 0x100) openat(r5, &(0x7f0000000180)='./file1\x00', 0x800, 0x10c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r6, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:16:12 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x600, 0x0, 0x0) 10:16:12 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080), &(0x7f0000000140)={'L+', 0x10000}, 0x16, 0x1) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:16:12 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x700000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:16:12 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x3c, 0x0) 10:16:12 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x142d) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:16:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000280)={0x7fff, 0x1, 0x8, 0x3}) close_range(r1, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r1, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x301004300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0xfffffffffffffecc) finit_module(r2, 0x0, 0x0) syz_io_uring_setup(0x7978, &(0x7f0000000140)={0x0, 0x264, 0x2, 0x0, 0x1a1, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xfffffffffffffdf2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:16:12 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x7000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2807.505180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2807.511270] Module has invalid ELF structures [ 2807.538888] Module has invalid ELF structures [ 2807.540315] Module has invalid ELF structures [ 2807.549426] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:16:12 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0xc00, 0x0, 0x0) 10:16:13 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x69, 0x0) 10:16:13 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000380)) finit_module(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0x6) 10:16:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xe00000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:16:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0xa37c, 0x40) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2807.766140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2807.774562] Module has invalid ELF structures [ 2807.804142] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2807.849520] Module has invalid ELF structures [ 2807.893453] Module has invalid ELF structures 10:16:29 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c00000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:16:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xc000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:16:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) read(r1, &(0x7f0000000140), 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:16:29 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x1200, 0x0, 0x0) 10:16:29 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) setxattr$security_selinux(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000240)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x50000001}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:16:29 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c00) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:16:29 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6a, 0x0) 10:16:29 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000001e00)={0x1c, 0x1a, 0x70c, 0x70bd28, 0x25dfdbfc, {0x10}, [@typed={0x8, 0x93, 0x0, 0x0, @uid=r4}]}, 0x1c}}, 0x44080) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2824.016882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2824.044641] Module has invalid ELF structures [ 2824.048701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2824.048706] Module has invalid ELF structures [ 2824.057837] Module has invalid ELF structures [ 2824.066780] Module has invalid ELF structures 10:16:29 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x117, 0x0) 10:16:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:16:29 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x1800, 0x0, 0x0) 10:16:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000180)={0x60b, 0xffffff41}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) r3 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000140)='uid_map\x00') getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r5, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2824.274815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2824.298941] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:16:29 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x4a0e000000000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:16:29 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:16:29 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) fallocate(r2, 0x4c, 0x6, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:16:29 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8020000, 0xfffffffe, 0x0, 0x0, 0x8c5e}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)=0x0) clone3(&(0x7f0000000500)={0x8000000, &(0x7f0000000240), &(0x7f0000000300)=0x0, &(0x7f0000000400), {0x30}, &(0x7f0000000440)=""/27, 0x1b, &(0x7f0000000480)=""/32, &(0x7f00000004c0)=[r3, r3], 0x2, {r2}}, 0x58) pipe2(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x30, 0x0, 0x5, 0x2, 0x0, 0x1f, 0x70150, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x690921e1, 0x4, @perf_config_ext={0xffffffff, 0x4f0}, 0x2, 0x3, 0x8001, 0x4, 0x7fff, 0x7fffffff, 0x7f9, 0x0, 0x5, 0x0, 0x3}, r4, 0x6, r5, 0x1) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000002c0)=ANY=[@ANYBLOB="c30c750e00000000000100131118000000", @ANYRES32=r2, @ANYBLOB='DIJv\b\x00\x00\x00./file0\x00']) finit_module(r1, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) 10:16:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xffffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:16:29 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x129, 0x0) [ 2824.422050] Module has invalid ELF structures [ 2824.474437] Module has invalid ELF structures [ 2824.505327] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2824.527100] Module has invalid ELF structures [ 2824.553380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:16:44 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x7ffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:16:44 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)=0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)={0x1330, 0x3e, 0x20, 0x70bd28, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x39, 0x0, 0x0, @fd=r3}, @nested={0x8c, 0x35, 0x0, 0x1, [@generic="00f65dde8f527b89dce0f9da3314cc4335b89c96787304134509788884ef96f1562a0243d6194c0fde4f4da365e0a10dbd337e08c8740ecd18547e1b47a96d8a673accacfac648185afc79e4b6929e46ebcf41c5fc0b1a9ad3b119932991da95be79c5c98a49c063679c819b8034c9a432050659169fbdd7d4cbf5ed00276d59240d5b5d59c2bef3"]}, @typed={0x8, 0x2f, 0x0, 0x0, @pid=r4}, @generic="508d8a8c9e730d52163c031610d4f3bb70e6c779a1d64881d89a4046ed0db034a1b4f47ca7f128c0295ccc7de3069229d80ebc5e3a97d925", @typed={0x8, 0x37, 0x0, 0x0, @fd=r0}, @nested={0x1119, 0x56, 0x0, 0x1, [@typed={0x4, 0x14}, @generic="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", @typed={0x14, 0x89, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="5e562e81940e2a198c6b648de96b4bf6426afb2771ac07cedd25dd19ce82473778b660da1dd68435259e0dc9", @generic="d45c7a1a1a2336bc2b8fd741570f705f64bb9f9b82c05a26205b3f5ae35ea285e05c759e07f2634792f5cb226a52b2ff2c87a6c0812310e05052b8a610e36408f48221a05a25d3dfdac6ea83a59018491b40475d9cfd412b81994deeac3e5382c12d2d7a1808465ba4b3ce0e47b1789838087460f246da2768d48dc64f09573dfad2315e44c2a75d9d1698a7e6b1c9bf9de2d63978ba063792379745235254b2dc35ad9f3ae886d55cb6a104", @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@multicast1}, @generic="7507f2b40075db7fee25410d92acc0b24ddc02c8269c9d483c384708f5"]}, @nested={0xc, 0x6c, 0x0, 0x1, [@typed={0x5, 0x45, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x200}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @nested={0xf9, 0x83, 0x0, 0x1, [@generic="2fd402f92bf65a500b84cabec47e6600dd5613878e33735a5832dd49a63f2ef82ee000b358c9c0558d02d58d658a68ca5188208e24c0263e8cfb8c68e4e10685d18ff2cb565847cfce81e0096399a811be17", @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@multicast1}, @generic="cd134f53da78664dc884a4bb4562f66c3a6451cfe34f523f3b17e16c42bd033129d3b5d4b3ac17e5c734d52ce40a8dd32aa12d5a207436f5df81742323f5c004a32ab3cccf6804d12363779d5f7eca9237c79b87d03e1dd97a6d20e0d4d11ae378d9648272eb4f2ba819f275d1e196796505a7c8a1472a49e19218c307b6557185d38f5374514bdaf0b0024de33c2e344ec4e05d2875c2caa359de"]}]}, 0x1330}, 0x1, 0x0, 0x0, 0x8000}, 0x81) 10:16:44 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2d14) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:16:44 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x1e00, 0x0, 0x0) 10:16:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000140)=0xfffffffffffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) splice(r1, &(0x7f0000000180)=0x100, 0xffffffffffffffff, &(0x7f00000001c0)=0x2, 0x7, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:16:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xffffffff00000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:16:44 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8, 0x19}]}, 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r2, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in=@multicast2}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}}, [@lifetime_val={0x24, 0x9, {0x0, 0x0, 0xfffffffffffffffe}}, @mark={0xc, 0x15, {0x2}}]}, 0x70}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0xc, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:16:44 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x2) [ 2839.300065] Module has invalid ELF structures [ 2839.306158] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:16:44 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x8000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2839.368074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2839.369817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2839.374956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2839.401750] Module has invalid ELF structures [ 2839.405475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2839.414882] Module has invalid ELF structures 10:16:44 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x2000, 0x0, 0x0) [ 2839.486057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2839.488256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2839.491910] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2839.550300] Module has invalid ELF structures 10:16:44 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x80000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:16:44 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x3) [ 2839.710516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2839.740597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:17:01 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x200000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:17:01 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x20000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:17:01 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x4) 10:17:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x4, 0x8}}, './file1\x00'}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {r4}}, './file1/file0\x00'}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x810, r5, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1, 0x4d2}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x12000, 0x1, {0x3}}, 0x5) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) fallocate(r5, 0x11, 0x1, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r8, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f00000002c0)}, 0x0, 0x4000000}, 0x0) 10:17:01 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xffffffffffff0700) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:17:01 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x80, 0x9, 0x5, 0x8, 0x0, 0x0, 0x5f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x400, 0x2, @perf_config_ext={0xffff, 0x27e8}, 0x18, 0xaa, 0xc92, 0x6, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf, 0x81, 0xc9, 0x7, 0x0, 0x5, 0xa0200, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x2, @perf_bp={&(0x7f0000000080), 0xd}, 0x200, 0x5922, 0x8001, 0x7, 0x1, 0x8b, 0x5, 0x0, 0x4, 0x0, 0x800}, r1, 0xb, r2, 0x8) close_range(r0, 0xffffffffffffffff, 0x2) r3 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r4, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:17:01 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10010, 0xffffffffffffffff, 0x78816000) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c46ffc00455010000000100000002000600e00000001b020000000000004000000000000000f4000000000000003f00000001803800010004000800ffff0500000001000080e1000000000000000900000000000000010000000000000000000000000000000000000000020000ff01000000000000afbbdac5bf90999331490c27b512274b799d53ab39338e7dbd11083237907494e70142799f30e8eeb10b865593e928c554e3f91688d3880c463aa62d12c36eb4dd8d917cb1216cd0a5dadc0ab926c351ba5de6fb22cf0813d903e4f44578330afd6e787e2ed189a961f566e800a164f608bc678926b93a955cf09342cc76445798f7d167b886e6d1092fca3c7202669b6d5a4bb5baf8a5960efb05b95def9dee77c8157901000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/1309], 0x51d) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000005280)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)=ANY=[@ANYBLOB="24000000f10b01000000000000000a080003400000000008000240000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x4001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x3, 0x101, 0x0, 0x8, 0x0, 0x1}, 0x2) recvmmsg$unix(r1, &(0x7f0000005100)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000380)=""/187, 0xbb}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/215, 0xd7}, {&(0x7f0000000540)=""/134, 0x86}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000300)=""/36, 0x24}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x8, &(0x7f0000001d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004e00), 0x6e, &(0x7f0000001d40)=[{&(0x7f0000004e80)=""/190, 0xbe}, {&(0x7f0000004f40)=""/217, 0xd9}], 0x2, &(0x7f0000005040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}}], 0x2, 0x80, &(0x7f0000005180)={0x77359400}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'nr0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf}, 0x0) ftruncate(r0, 0x8) fstat(0xffffffffffffffff, &(0x7f00000001c0)) 10:17:01 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x2400, 0x0, 0x0) [ 2855.777439] Module has invalid ELF structures [ 2855.778800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2855.781592] Module has invalid ELF structures [ 2855.786689] Module has invalid ELF structures [ 2855.793549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:17:01 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xe0ffff00000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:17:01 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x5) [ 2855.950622] Module has invalid ELF structures 10:17:01 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000001880), &(0x7f00000018c0)=0x4) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x40, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}}, 0x40}}, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x8, 0x2) r4 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r4, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:17:01 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x2a00, 0x0, 0x0) [ 2856.014751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2856.063463] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:17:01 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) socket$netlink(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={r2, 0x0, 0xffffffffffffffff, 0x8001}) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:17:01 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x3000, 0x0, 0x0) 10:17:01 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x100000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:17:01 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x1, 0x5, 0x3, 0x2, 0x0, 0x9, 0xa1340, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x43014, 0x200, 0x0, 0x0, 0xf655, 0xfffffffa, 0xfffa, 0x0, 0x7}, 0x0, 0x1, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r2) r4 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r4, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xfffffffffffffee8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:17:01 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xe0ffff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:17:01 executing program 7: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000140)=0x8001) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r1, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:17:01 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x6) [ 2856.222171] Module has invalid ELF structures [ 2856.263448] Module has invalid ELF structures 10:17:01 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x200000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2856.353987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2856.363167] Module has invalid ELF structures [ 2856.374819] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:17:01 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x3600, 0x0, 0x0) [ 2856.407390] Module has invalid ELF structures [ 2856.456122] Module has invalid ELF structures [ 2856.457534] Module has invalid ELF structures 10:17:01 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x214000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2856.543178] Module has invalid ELF structures [ 2856.549146] cgroup: fork rejected by pids controller in /syz6 10:17:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:17:17 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) r2 = syz_io_uring_setup(0x6e20, &(0x7f0000000380), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r6, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:17:17 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x300000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:17:17 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x7) 10:17:17 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001e0075b90000000000000000fc0100000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000002400090000000000000000000000000000000000000c0015000000000000000000"], 0x70}}, 0x0) write(r4, &(0x7f0000000380)="9040a862a004fa69d1fc0a181d83cb60c2ad9dc6c071f349b796cc272cffae6e6b036ea6149c3186859bbc74915a92b9334f2ae5122d255cce6c4dda95534984383a9cde026b16f4677c22a4b8634745fa75a45b9f1a966a3fb408a3f8b8a0e680fcb5f08e9d51f95f43c57b4ff3f90169604489e06f8a7bc39a58218bf860b52c57cf9a39ef41", 0x87) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:17:17 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x3c00, 0x0, 0x0) [ 2872.508004] Module has invalid ELF structures 10:17:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x14, r4, 0x2, 0x70bd27}, 0xffffffffffffff36}}, 0x200040d1) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012abd7000fbdbdf250900000008003700020000000800090001ac0f0009000700b58f1c4e6f000000082000000000000008006e80040002000400280011000700c23d5450b8f55a75e69645561c000000aca0cb3ae054613455823e9be478655362bae62222c4df93b030dacac02be3d8a8de1f9232b2148e74e38d68df24bd4c8b02df181557214e16b49f8f92bafcabade8401b39e2f673a0d910c222a056b5aba2e3c3274eae0dde"], 0x58}, 0x1, 0x0, 0x0, 0x20000011}, 0x8000) [ 2872.518907] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2872.527342] Module has invalid ELF structures sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)={0x1548, r4, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x33}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb2}]}]}, @NL80211_ATTR_TID_CONFIG={0x134, 0x11d, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x90}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x60, 0x12, 0xc, 0x16, 0x60, 0xc, 0x9]}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x937c, 0x8000, 0xfc01, 0xfff, 0xec, 0x7, 0x4, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xb, 0x6, 0x24, 0x3, 0x1, 0x18, 0x9, 0x49, 0x24, 0xc, 0x6c, 0x12, 0x30, 0xb, 0xb, 0x1b, 0x9, 0x14, 0x3, 0x4, 0xb, 0x30, 0x62, 0x16]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x3}, {0x0, 0x4}, {0x4, 0xa}, {0x5}, {0x3, 0x1}, {0x3, 0x8}, {0x3, 0x4}, {0x0, 0x6}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x0, 0x7f, 0xc827, 0x6, 0x605c, 0x655c]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x5, 0x0, 0x5, 0x5, 0x80, 0x4897]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x24, 0x13, 0x48, 0x5, 0x24, 0x6, 0x24, 0x0, 0xc, 0xa96cc474fb559b05, 0x16, 0x24, 0x5, 0x30, 0x5, 0x14, 0x2, 0x3, 0x74, 0x12, 0x9, 0x3, 0x9, 0x6, 0x16, 0x48, 0x5, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xff, 0x1000, 0x7, 0x101, 0x1, 0x4, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdb}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x52}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1cc, 0x11d, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1f, 0x2, 0x6, 0x20, 0x0, 0x6, 0x3]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x0, 0x5, 0x24, 0xa, 0x60, 0x1b5ca5b532a7f88c, 0xc, 0x24, 0xb, 0xb, 0x16, 0x5, 0x36, 0x9, 0x5, 0xb, 0x0, 0x19, 0x36, 0x3, 0x1b, 0x4, 0x16, 0xc, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x2}, {0x5, 0x6}, {0x3, 0x5}, {}, {0x0, 0x4}, {0x2, 0x2}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x8}, {0x0, 0x5}, {0x3, 0x1}, {0x0, 0xa}, {0x4}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x8}, {0x3, 0xa}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x8}, {0x2, 0x9}, {0x4, 0x5}, {0x0, 0x1}, {0x2, 0x7}, {0x4, 0x2}, {0x0, 0x9}, {0x4, 0x5}, {0x3, 0x7}, {0x6, 0x3}, {0x7, 0x4}, {0x1, 0x3}, {0x7, 0x9}, {0x3, 0x1}, {0x3, 0x4}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0x1}, {0x4, 0x7}, {0x1, 0x2}, {0x0, 0xa}, {0x6, 0x1}, {0x2}, {0x2, 0x5}, {0x3, 0x8}, {0x5, 0x9}, {0x5}, {0x3, 0x7}, {0x6}, {0x0, 0xa}, {0x5, 0x8}, {0x4, 0x3}, {0x6}, {0x1, 0x1}, {0x3, 0x1}, {0x6, 0x7}, {0x1, 0x4}, {0x2, 0x4}, {0x7, 0x9}, {0x5, 0x8}, {0x2, 0x1}, {0x4, 0x9}, {}, {0x2, 0x9}, {0x2, 0x4}, {0x7, 0x8}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0xa}, {0x3, 0x2}, {0x7, 0x8}, {0x7, 0x7}, {0x5}, {0x6, 0x9}, {0x3, 0x3}, {0x1, 0x9}, {0x6, 0xa}, {0x1, 0x4}, {0x5, 0x7}, {0x2, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x2, 0x3}, {0x0, 0x7}, {0x5, 0x5}, {0x2, 0x7}, {0x2, 0x5}, {0x5, 0x9}, {0x6, 0x6}, {0x4, 0x6}, {0x7, 0x4}, {0x1}, {0x5, 0x8}, {0x5, 0x2}, {0x6, 0x1}, {0x6, 0x6}, {0x0, 0x9}, {0x4, 0x5}, {0x6, 0x5}, {0x4, 0x5}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0xa}, {0x5, 0x19}, {0x4, 0x4}, {0x1, 0x2}, {0x3, 0x9}, {0x5, 0x3}, {0x3, 0x3}]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0xfae8, 0x1, 0x515, 0x6, 0x84f1, 0x2, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7f, 0x8000, 0x7, 0x3, 0x7ff, 0xa9, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0xfff, 0xa40, 0x1000, 0x2, 0x4, 0x200]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x99}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x92}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}]}]}, @NL80211_ATTR_TID_CONFIG={0x6a4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x7c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x4}, {0x1, 0x6}, {0x6, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x4}, {0x5, 0x6}, {0x7, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x2}, {0x5, 0x1}, {0x1, 0x4}, {0x1, 0x2}, {0x2, 0x2}, {0x7, 0x9}, {0x0, 0x9}, {0x7, 0x1}, {0x1, 0x7}, {0x6, 0x7}, {0x1}, {0x4, 0x3}, {0x7, 0x3}, {0x6}, {0x6, 0xa}, {0x0, 0x4}, {0x2, 0x4}, {0x3, 0xa}, {0x5}, {0x5, 0x1}, {0x6, 0x8}, {0x7, 0x4}, {0x5, 0x7}, {0x0, 0xa}, {0x4, 0x4}, {0x1, 0x1}, {0x2}, {0x6, 0xa}, {0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x9}, {0x6}, {0x3, 0x5}, {0x6}, {0x2}, {0x2, 0x6}, {0x5, 0x2}, {0x2}, {0x2, 0x7}, {0x1, 0x8}, {0x5, 0x3}, {0x2, 0x6}, {0x4, 0x4}, {0x3, 0x8}, {0x0, 0x2}, {0x2, 0x8}, {0x2}, {0x7, 0x6}, {0x5, 0xa}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x1, 0x9}, {0x7}, {0x1, 0x9}, {0x7, 0x3}, {0x2, 0x8}, {0x1, 0x3}, {0x3, 0x4}, {0x1, 0x4}, {0x4, 0x7}, {0x0, 0x4}, {0x3, 0x1}, {0x7, 0x6}, {0x4, 0x7}, {0x2, 0x7}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x6}, {0x4, 0x6}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x4}, {0x7, 0x5}, {0x3, 0x7}, {0x5, 0xa}, {0x0, 0x3}, {0x3, 0xa}, {0x5, 0x7}, {0x2}, {0x5, 0x2}, {0x0, 0x1}, {0x1}, {0x3, 0x5}, {}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x4}, {0x6, 0x5}, {0x0, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x2b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x280, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x9, 0x6, 0x2, 0x2, 0x2, 0x4, 0x1b, 0x1b, 0x48, 0xc, 0x1, 0x36, 0x30, 0x9, 0x9, 0x3, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0xfffa, 0x1, 0x8, 0x9, 0x7ff, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x587c, 0x8, 0x6, 0x5, 0xc18c, 0x3ff, 0x2]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x4}, {0x1, 0x6}, {0x0, 0x6}, {0x6, 0x3}, {0x0, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x6, 0x7}, {0x1, 0x3}, {0x4, 0x8}, {}, {0x1, 0x1}, {0x5, 0x4}, {0x1, 0x6}, {0x2, 0x9}, {0x1, 0x6}, {0x0, 0x4}, {0x4, 0xa}, {0x5, 0x9}, {0x6, 0x7}, {0x7, 0x4}, {0x6, 0x7}, {0x1, 0x5}, {0x5, 0x3}, {0x6}, {0x7, 0x7}, {0x4, 0x3}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x4}, {0x3, 0x9}, {0x5, 0x9}, {0x7, 0x4}, {0x2, 0x4}, {0x3}, {0x7, 0x4}, {0x2}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x9}, {0x2, 0x1}, {0x7, 0x1}, {0x0, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x30, 0x18, 0xc, 0x36, 0x9, 0x3, 0xc, 0x12, 0x16, 0xc, 0x6, 0x24]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x1b, 0x72, 0x6, 0x48, 0x18, 0x48, 0xc, 0x4, 0x18, 0x16, 0x6, 0xb, 0x30, 0x60, 0x6, 0x5]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x30, 0x12, 0x30, 0xd2fe88c736b1e48d, 0x4a, 0x9, 0x2c, 0x6c, 0x2, 0x16, 0x1]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x4}, {0x5, 0xa}, {0x2, 0x4}, {0x0, 0x3}, {0x5, 0x4}, {0x6, 0x9}, {0x3, 0xc}, {0x5, 0x6}, {0x2, 0x6}, {0x5, 0x6}, {0x1, 0x6}, {0x5, 0x9}, {0x6, 0x9}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x2}, {0x6, 0x4}, {0x0, 0x9}, {0x6, 0xa}, {0x6, 0xa}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x9, 0x80, 0x6b, 0xff, 0x7ff, 0x200, 0x36]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0xc0, 0x2, 0x4, 0x18, 0x2, 0x60, 0x3f, 0x18]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x30, 0xc, 0xb, 0x5, 0x2, 0x5, 0x24, 0x9, 0x1, 0xb, 0x12, 0x30, 0x12, 0x5, 0x24, 0x9, 0x18, 0x24, 0x16, 0x0, 0x24, 0x30, 0x24, 0xc]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x48, 0x0, 0x30, 0x16, 0x2, 0x3, 0x1, 0x48, 0x18, 0x6c, 0x60, 0x0, 0x36, 0x48, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xac3f, 0x6, 0x0, 0x6, 0x9, 0x80, 0x9, 0x9800]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0xa}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0x7}, {0x5}, {0x4, 0x2}, {0x2, 0x2}, {0x3, 0x4}, {0x6, 0x4}, {0x2}, {0x0, 0x3}, {0x4, 0x9}, {0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x7}, {0x0, 0x9}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x7, 0x3}, {0x6, 0x9}, {0x1}, {0x6, 0x4}, {0x3, 0x5}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x2}, {0x5, 0x9}, {0x4}, {0x7, 0x4}, {0x4, 0x6}, {0x5, 0x8}, {0x6, 0x2}, {0x6}, {0x5, 0x5}, {0x1, 0x3}, {0x0, 0x2}, {0x3, 0x6}, {0x6, 0x7}, {0x2, 0x2}, {0x6, 0x5}, {0x1, 0x5}, {0x2, 0x4}, {0x7, 0x8}, {0x7, 0x5}, {0x2, 0x9}, {0x6, 0x3}, {0x1, 0x8}, {0x5, 0x5}, {0x3, 0x1}, {0x1, 0x7}, {0x4, 0x9}, {0x2, 0x3}, {0x7, 0x1}, {0x4, 0x8}, {0x7, 0x3}, {0x0, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x9}, {0x1, 0x3}, {0x3, 0xa}, {0x5, 0x9}, {0x5, 0x7}, {0x1, 0xf}, {0x4, 0x9}, {0x5, 0x2}, {0x2, 0x6}, {0x6, 0xa}, {0x1, 0xa}]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x7}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x5, 0x3}, {0x7, 0x9}, {0x3, 0xa}, {0x5, 0x3}, {0x5, 0x1}, {0x2, 0x4}, {0x6, 0x3}, {0x3, 0x3}, {0x1, 0x4}, {0x4, 0x3}, {0x6}, {0x2, 0x5}, {0x5, 0x3}, {0x5}, {0x5, 0x9}, {0x3, 0x3}, {0x3}, {0x5, 0xa}, {0x4, 0x8}, {0x1, 0x4}, {0x0, 0x2}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x3}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x5}, {0x7, 0x9}, {0x5, 0x8}, {0x2, 0xa}, {0x2, 0x8}, {0x3, 0x4}, {0x2, 0x2}, {}, {0x4, 0x9}, {0x3, 0x5}, {0x5, 0x7}, {0x6, 0x6}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x85, 0x3, 0x9e, 0xffe1, 0x8, 0x7fff, 0x8]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0xc85304deb5376730}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4dc8, 0x3, 0x1ff, 0x1, 0x0, 0x3ff, 0x9]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x777, 0x20, 0xd3, 0x4, 0x5b9e, 0x5, 0xffff, 0xfc00]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x7}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x873a, 0x71, 0x6, 0x8, 0x6, 0x9, 0x2, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x86}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x318, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2e4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x998, 0x40, 0xe370, 0x2, 0x101, 0x8, 0xc042, 0x1]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x7}, {0x7, 0x9}, {0x3, 0x6}, {0x0, 0x8}, {0x7, 0x7}, {0x4, 0x4}, {0x0, 0x5}, {0x6, 0x4}, {0x5, 0x8}, {0x5, 0x8}, {0x4, 0x2}, {0x5, 0x3}, {0x5, 0x8}, {0x2}, {0x6, 0xa}, {0x5, 0x1}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x9}, {0x7, 0x1}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x2}, {0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x0, 0x9}, {0x7, 0xa}, {0x7, 0x1}, {0x6, 0x4}, {0x4, 0x1}, {0x4, 0x8}, {0x0, 0x6}, {0x6, 0x2}, {0x2, 0x1}, {0x7, 0xa}, {0x4, 0x1}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x7, 0x1}, {0x5, 0x5}, {0x6, 0x2}, {0x2, 0x8}, {0x1, 0x5}, {0x3, 0x5}, {0x7, 0x3}, {0x1, 0x9}, {0x6, 0x5}, {0x3, 0x7}, {0x2, 0x2}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x48, 0x29, 0x4, 0x1b, 0xc, 0x60, 0x12, 0x1b, 0x12, 0x18, 0x16, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe00, 0xffff, 0x6, 0x6, 0x3f, 0x6d50, 0x1, 0x2]}}]}, @NL80211_BAND_6GHZ={0xf4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x9}, {0x1, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x1}, {0x5, 0x2}, {0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x7}, {0x7, 0x5}, {0x3, 0x6}, {0x4, 0x9}, {0x4, 0x6}, {0x4, 0x7}, {0x5}, {0x4, 0xa}, {0x6, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x3, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x3, 0x7}, {0x6, 0x9}, {0x3, 0x4}, {0x4, 0x3}, {0x7, 0x7}, {0x0, 0x2}, {0x3, 0x2}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x1}, {0x1, 0x9}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x7}, {0x6, 0x7}, {0x0, 0x7}, {0x7}, {0x6, 0x4}, {0x2, 0x1}, {0x0, 0x2}, {0x7}, {0x0, 0x5}, {0x0, 0x6}, {0x1}, {0x2, 0x3}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0xa}, {0x6, 0x8}, {0x7, 0x9}, {0x2, 0x7}, {0x0, 0x5}, {0x1}, {0x6, 0x4}, {0x6, 0x1}, {0x5, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x0, 0x0, 0x8, 0x7, 0x8, 0x401, 0x100]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x3}, {0x6, 0x4}, {0x0, 0x7}, {0x1, 0x4}, {0x6, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {0x1}, {0x2, 0x3}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x4}, {0x6, 0x2}, {0x7, 0x4}, {0x0, 0x3}, {0x7, 0xa}, {0x5, 0x1}, {0x4}, {0x1, 0x6}, {0x5, 0x6}, {0x0, 0x7}, {0x7, 0x6}, {0x4, 0x1}, {0x5}, {0x2, 0x4}, {0x6, 0x1}, {0x1, 0x2}, {0x7, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x3, 0x8, 0x6, 0x200, 0x0, 0x3, 0x4]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x4, 0x6c, 0x4, 0x6c, 0x36, 0x4, 0x3, 0x1b, 0x36, 0x36, 0x36, 0x9, 0x5, 0x1, 0x6c, 0xc, 0x56, 0x36, 0x24, 0x4, 0x60, 0x24, 0x60, 0x16, 0x16, 0x1b, 0x5]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x24, 0x6, 0x16, 0x24, 0x9, 0x9, 0x1b, 0x12, 0x1b, 0x2, 0x24, 0x9, 0x5, 0x24, 0x48, 0x5]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x5, 0x18, 0x16, 0x36, 0x1b, 0x12, 0x5a, 0x18, 0x3, 0x1b, 0x60, 0x9, 0x16, 0x2, 0x3, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x3, 0x8, 0x8000, 0x1, 0x3, 0x3f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2511, 0x1, 0x1, 0x2, 0x5, 0xf8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x0, 0xf7e6, 0xffff, 0x4, 0x40, 0x8001]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x60, 0x24, 0x6c, 0x12, 0x1, 0x12, 0x12, 0x24, 0x1, 0x6, 0x1b, 0x0, 0x24, 0x12, 0x48, 0x5, 0x60, 0xb, 0x36, 0x6c, 0x9, 0x24, 0xb, 0xc, 0x1d, 0x16, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6f4d, 0xffd3, 0x3800, 0x6f2c, 0x0, 0x401]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x18, 0x36, 0x0, 0x18, 0x1b, 0x12, 0x24, 0x1, 0x3, 0x18, 0x1, 0x11, 0xc, 0x1b, 0xb, 0xc, 0x6c, 0x12, 0x9, 0x4, 0x18, 0xb, 0x16]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x0, 0x401, 0x1000, 0x4, 0x1, 0x9, 0x8]}}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x2}, {0x3, 0x9}, {0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x7, 0x8}, {0x6, 0x1}, {0x0, 0x9}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0xa}, {0x2}, {0x0, 0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x6}, {0x2, 0x1}, {0x6, 0x2}, {0x5, 0x2}, {0x7, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x6, 0x5}, {0x5, 0x5}, {0x1}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {0x3, 0x5}, {0x1, 0x3}, {0x2, 0x2}, {0x4, 0xa}, {0x2, 0xa}, {0x6, 0x3}, {0x7, 0x9}, {0x6, 0x9}, {0x5, 0x3}, {0x5, 0x6}, {0x5, 0x8}, {0x6, 0x6}, {0x1, 0x3}, {0x6}, {0x2, 0xa}, {0x4, 0x1}, {0x2, 0x5}, {0x2, 0xa}, {0x2, 0x3}, {0x2, 0x6}, {0x7}, {0x6, 0x3}, {0x6, 0x3}, {0x1}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x6, 0x8}, {0x4, 0x6}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x1}, {0x2}, {0x6, 0x2}, {0x5, 0x8}, {0x0, 0x6}, {0x3, 0x8}, {0x3}, {0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x6, 0x5}, {0x2, 0x8}, {0x5, 0x9}, {0x5, 0x6}, {0x7, 0x6}, {0x3, 0x3}, {0x6, 0xa}, {0x5, 0x3}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x6}, {0x6}, {0x7, 0x8}, {0x1, 0x12}, {0x2, 0x7}, {0x5, 0xa}, {0x4, 0x2}, {0x3, 0x9}, {0x5, 0xa}, {0x5, 0x5}, {0x5, 0x8}, {0x6, 0x6}, {0x6, 0x3}, {0x7, 0x5}, {0x0, 0x3}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x5}, {0x3, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0x8}, {0x7}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0xa}, {0x6, 0x2}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff8, 0x6, 0x0, 0xfff8, 0x40, 0x1, 0x8001]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x6, 0x2, 0x36, 0x2, 0x5, 0x4, 0x36, 0x6c, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1b}]}]}, @NL80211_ATTR_TID_CONFIG={0x300, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2072}]}, {0x2ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2d4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x16, 0x2, 0x30, 0x5, 0x6c, 0x2, 0x30, 0x48, 0x5, 0xc, 0x5, 0x1b, 0x60, 0x3, 0xd, 0x12, 0x4, 0x30, 0x18, 0x1, 0x5]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x30, 0x0, 0x48, 0x24, 0x60, 0xc, 0x60, 0x30, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x400, 0x1, 0xe5e8, 0x800, 0x1f2, 0x40, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1f, 0x1, 0x6, 0x4, 0x100, 0x200, 0xfffb]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x6c, 0xc, 0x60, 0x16, 0x1b, 0x1b, 0x6c, 0x18, 0x5, 0xb, 0x1b, 0x48, 0x60, 0xc]}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x81, 0x69f, 0x800, 0x4, 0x1, 0x9, 0x5]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x7}, {0x4, 0x2}, {0x6, 0xa}, {0x1, 0x7}, {0x0, 0x5}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x4, 0x2}, {0x5}, {0x5, 0x1}, {0x6, 0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x5}, {0x5, 0xa}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x2}, {0x6, 0x8}, {0x1, 0x1}, {0x1}, {0x7, 0xa}, {0x0, 0x2}, {0x5, 0x9}, {0x0, 0x9}, {0x3, 0x2}, {0x4}, {0x1, 0x3}, {0x5, 0x8}, {0x4}, {0x7, 0x8}, {0x2, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc, 0x30, 0x6c, 0x24, 0x5, 0x6c, 0x6c, 0x60, 0x6, 0x16, 0x16, 0x9, 0x24, 0x6]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2, 0x12, 0x1, 0x57, 0xb, 0x9, 0x4, 0x16, 0x30, 0x1, 0xc, 0x36, 0x60, 0x1e, 0x4, 0x5, 0x2, 0x12, 0x3, 0x16]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x5, 0x60]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x6}, {0x5, 0x5}, {0x6, 0x3}, {0x3, 0xa}, {0x6, 0x6}, {0x4, 0x7}, {0x1, 0x4}, {0x2, 0x7}, {0x0, 0x8}, {0x2, 0x9}, {0x1, 0x3}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0x4}, {0x2}, {0x3, 0x8}, {0x4, 0x4}, {0x4}, {0x5, 0x4}, {}, {0x0, 0x8}, {0x1, 0x4}, {0x6}, {0x3, 0xa}, {0x7}, {0x7, 0x4}, {0x7, 0x4}, {0x6, 0x4}, {0x2, 0x3}, {0x3, 0x2}, {0x0, 0x4}, {0x5}, {0x7}, {0x2, 0x3}, {0x3, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x3, 0xa}, {0x6, 0x2}, {0x7, 0x7}, {0x7, 0x9}, {0x5}, {0x6, 0x5}, {0x2, 0xa}, {0x5, 0x4}, {0x0, 0x3}, {0x6, 0x5}, {0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x6, 0x8}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3c, 0x9, 0x81, 0x3, 0x7ff, 0x4, 0x5423]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd45, 0x4, 0x6, 0x0, 0x5, 0x3988, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x100, 0xff, 0x7, 0x3bb2, 0x9, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0xc, 0x4c, 0x4, 0x9, 0x18, 0x1, 0x2, 0x12, 0xf, 0x48, 0x16, 0x48, 0x1b, 0xb, 0x1, 0x5, 0x24, 0x4, 0x4, 0xc, 0x24, 0x18]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0xc, 0x18, 0x0, 0x30, 0x3, 0x4, 0x36, 0x12, 0xc, 0x9, 0x36, 0x6c, 0x60, 0x18, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0x6, 0x18, 0x2, 0xe]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6d, 0x18, 0x12, 0x36, 0x12]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x16, 0x1b, 0x9, 0x6, 0x6, 0xca, 0x60, 0x12, 0x60, 0xb, 0x48]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4, 0x6}, {0x3}, {0x4, 0x4}, {0x5, 0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x4}, {0x7, 0x8}, {0x6, 0x3}, {0x4, 0x7}, {0x1, 0x9}, {0x5, 0x3}, {0x1}, {0x2, 0xa}, {0x2}, {0x5, 0x2}]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x5}, {0x1, 0x9}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x5, 0x7}, {0x5, 0x7}, {0x5, 0x6}, {0x0, 0x3}, {}, {0x1, 0x2}, {0x3, 0x9}, {0x6, 0x2}, {0x2, 0x5}, {0x2, 0x4}, {0x2}, {0x5, 0x9}, {0x1, 0x5}, {0x6, 0x6}, {0x7, 0x3}, {0x0, 0x6}, {0x5}, {0x3, 0x8}, {}, {0x7}, {0x1, 0x7}, {0x7, 0x4}, {0x1}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0x4}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x6, 0x2, 0x25f, 0x52, 0x62, 0x0, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3ff, 0xb1, 0x4, 0x80, 0xc000, 0x400, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xff, 0x7, 0xdd, 0xfffb, 0x1, 0xc2, 0x1f]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xb, 0x3, 0x6d, 0x24, 0x2, 0x9, 0x9, 0x18, 0x6, 0x60, 0x1b, 0x18, 0x24, 0xb, 0x3, 0x6, 0x18, 0x36, 0x1, 0x2]}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x6, 0x4}, {0x1, 0x6}, {0x3}, {0x4, 0x3}, {0x1, 0x5}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x2}, {0x7, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x6, 0x2}, {0x5, 0x8}, {0x1, 0x3}, {0x7, 0x5}, {0x7, 0x6}, {0x5, 0x2}, {0x7, 0x9}, {0x2}, {0x1, 0xa}, {0x5, 0x7}, {0x4, 0x5}, {0x1}, {0x0, 0x6}, {0x6}, {0x7, 0x4}, {0x3, 0xa}]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xcc218f5c26c5042, 0x16, 0x3, 0x9, 0x24, 0xb452007849d08974, 0x6c, 0x6, 0xb, 0x16, 0x18, 0x3a, 0xb, 0x2, 0xb, 0x30, 0xc, 0x0, 0x6, 0x18, 0x5, 0x30, 0xc, 0x12, 0x48, 0x23, 0x12, 0x2, 0x12]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x5, 0x9, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x2, 0x0, 0x7f, 0x6, 0x2, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1ff}]}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd66}]}, {0x110, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x12, 0x24, 0x0, 0x5, 0x4]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x4, 0x5a, 0x9, 0x36, 0x0, 0xb, 0x2c, 0x30, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x4}, {0x6, 0x5}, {0x0, 0xa}, {0x6, 0x4}, {0x6, 0x1}, {0x0, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x5, 0x8}, {0x3, 0x4}, {0x7, 0x7}, {0x1, 0x9}, {0x5, 0x2}, {0x2, 0x2}, {0x3, 0x4}, {0x0, 0x9}, {0x2, 0x9}, {0x2, 0x5}, {0x6}, {0x2, 0x3}, {0x7, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x3, 0xa}, {0x7}, {0x4, 0x7}, {0x1}, {0x5, 0xa}, {0x0, 0x9}, {0x2, 0x3}, {0x0, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x0, 0x1}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x3, 0xb, 0x9, 0xc, 0x24, 0xc, 0x4, 0x1b, 0xb, 0x30, 0x48, 0x35, 0x18, 0x48, 0x25, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x101, 0x5, 0xed, 0x6, 0x5, 0xdc33]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0x7}, {0x2, 0x3}, {0x6, 0x5}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x4}, {0x2, 0xa}, {0x6, 0x4}, {0x6, 0x9}, {0x4, 0x2}, {0x2, 0x3}, {0x6}, {0x5, 0x4}, {0x5}, {0x4, 0x1}, {0x3, 0x9}, {0x5, 0x4}, {0x2, 0x7}, {0x4, 0x8}, {0x2, 0x4}, {0x7, 0x7}, {0x6}, {0x1, 0x5}, {0x3}, {0x3, 0x3}, {0x5}, {0x4, 0x1}, {0x4, 0x2}, {0x3, 0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x5, 0x7}, {0x3, 0x5}, {0x0, 0x7}, {0x7, 0x3}, {0x6}, {0x5, 0x7}, {0x2, 0xa}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0xa}, {0x2}, {0x5, 0x2}, {0x1, 0x7}, {0x7, 0x4}, {0x7, 0xa}, {0x5, 0x3}, {0x6, 0x5}, {0x7, 0x1}, {0x7, 0x2}, {0x0, 0x1}, {0x6, 0x4}, {0x3, 0x9}, {0x5, 0x4}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x7}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x60, 0x4, 0x5, 0x24, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9a}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x200, 0xb578, 0x101, 0xe24, 0x6, 0xf3c, 0x80]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}]}]}, @NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x2d4, 0x11d, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x98}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xaf4a, 0x81, 0x1ff, 0x0, 0x9, 0xff, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0xc, 0x1, 0x36, 0x6c, 0x4, 0xc, 0x24, 0x48, 0xc, 0x1, 0x4e, 0x36, 0xb, 0x4, 0x2, 0x1b, 0x6, 0xc, 0x24, 0x1bf9bcf8c986eca2, 0xb, 0xc, 0x4, 0x18, 0x24, 0x6, 0xc, 0x16, 0x1b, 0x36]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0xb, 0x5, 0x1, 0x1, 0x36, 0xb, 0x2, 0x5, 0x6c, 0x1, 0x1b, 0xb, 0xb, 0x4, 0xb, 0x5, 0x0, 0x29, 0x4]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x48, 0xc, 0x1b, 0x6c, 0xc, 0x18, 0x1b, 0x16, 0xc, 0x0, 0x48, 0x60, 0xd7efa6da1ffa29b0, 0x18, 0x5, 0xc, 0x24, 0xb, 0x6c]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x3, 0x3, 0xb, 0x6c, 0x2, 0x6c, 0x2d, 0x16, 0x1b, 0xb, 0x1f, 0x1, 0x9, 0x9, 0x3, 0x24, 0x48, 0x1, 0x60, 0x60, 0x4, 0xc, 0x2a, 0x30, 0x8, 0x17, 0x36, 0x2, 0x13, 0x30]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0x2}, {0x0, 0x8}, {0x2, 0x9}, {0x3, 0x4}, {0x3}, {0x1, 0x2}, {0x1, 0x5}, {0x6, 0x8}, {0x5, 0x4}, {0x7, 0x1}, {0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x2, 0x6}, {0x1, 0x1}, {0x2, 0x2}, {0x2, 0x5}, {0x5, 0x2}, {0x1, 0x4}, {0x4, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0xa}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0x5}, {0x5, 0xa}, {0x4, 0x4}, {0x5, 0x9}, {0x4}, {0x7, 0x6}, {0x0, 0x2}, {0x2, 0x3}]}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1a8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdb}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x81}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0x6c, 0x3, 0x30, 0x4, 0x30, 0x9, 0x6, 0x6c]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x6}, {0x5, 0x8}, {0x3, 0x2}, {0x7, 0x5}, {0x1, 0xa}, {0x1, 0x6}, {0x7, 0xa}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xe744b90a4f8a79e5, 0x24, 0x18, 0xc, 0x6c, 0x3, 0x24, 0x24]}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x44, 0x3, 0x6c, 0x37607843383fd501, 0x3, 0x4, 0xc, 0x5a, 0x60, 0x16, 0x1, 0xb, 0x36, 0x1b, 0x9, 0x48, 0x30, 0x4, 0x1b, 0x36, 0xb, 0xe5604336bdff057b, 0x1, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7ff, 0x7, 0x0, 0x3f, 0xff, 0x400, 0xc404]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xf63, 0x4, 0x3ff, 0x1d76, 0xa000, 0xa92c, 0x99e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x6}, {0x0, 0x8}, {0x0, 0x2}, {0x5, 0x5}, {0x5}, {0x0, 0x7}, {0x0, 0x6}, {0x4, 0x7}, {0x7, 0x8}, {0x4, 0x3}, {0x2, 0x7}, {0x1, 0x1}, {0x6, 0x2}, {0x0, 0x2}, {0x2, 0xa}, {0x0, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {}, {0x3, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x1, 0x9}, {0x5, 0x4}, {0x7, 0x8}, {0x4, 0x9}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x3}, {0x2, 0x3}, {0x1, 0xa}, {0x7, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0xa}, {0x5, 0x7}, {0x4, 0x7}, {0x6, 0x9}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x4, 0x1}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x7}, {0x1, 0x5}, {0x3, 0xa}, {0x5, 0xa}, {0x3, 0x7}, {0x1, 0xa}]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x4}, {0x2, 0x2}, {0x3, 0x9}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x852eae5b1d628beb, 0x48, 0x5, 0xc, 0x48, 0x1, 0x24, 0x12, 0xb, 0x30, 0x9, 0x1b, 0x2, 0x6c, 0xb, 0x12, 0x60, 0xb, 0x6, 0xc, 0x1b, 0x9, 0x48, 0x0, 0x6]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0xa}, {0x5, 0x8}, {0x6, 0x5}, {0x1, 0x9}, {0x2, 0xa}, {0x7, 0x4}, {0x0, 0x9}, {0x5, 0x6}, {0x3, 0x6}, {0x7, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x7}, {0x0, 0x9}, {0x0, 0x5}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0x5}, {0x5, 0x7}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x4}, {0x6, 0x2}, {0x4, 0x9}, {0x3, 0x2}, {0x6, 0x2}, {0x4, 0x4}, {0x4, 0x1}, {0x2, 0x7}, {0x4, 0x9}, {0x0, 0x4}, {0x2, 0x5}, {0x7, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x4, 0x6}, {0x0, 0x1}, {0x6, 0x2}, {0x5, 0x4}, {0x1, 0xa}, {0x3, 0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x2, 0x4}, {0x1, 0x6}, {0x3, 0x5}, {0x0, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x2, 0xa}, {0x3, 0x9}, {0x1, 0x3}, {0x4}, {0x6, 0x7}, {0x4, 0x3}, {0x3, 0x7}, {0x7, 0x5}, {0x3, 0x6}, {0x1, 0x9}, {0x0, 0x5}, {0x4, 0x9}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x5}, {0x4, 0x1}, {0x6, 0x4}, {0x7, 0x2}, {0x4, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x1b, 0x48, 0x9, 0xc, 0x48, 0x4, 0x0, 0x6, 0x12, 0x5, 0x36, 0x48, 0xb, 0x30, 0x4, 0x6c, 0x1b, 0x16, 0xb, 0x69, 0x30, 0x36, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x401}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x79}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9c}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x284, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x470d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x250, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x401, 0x10, 0x0, 0x3, 0x5, 0x3, 0xb38]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x2, 0x32, 0x1, 0xc, 0x36, 0x48, 0x6, 0x24, 0x6c, 0x0, 0x5, 0x24, 0x12, 0x9, 0x0, 0x1b, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5956, 0x3ff, 0x8, 0x101, 0x2, 0xfff, 0xfd, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x7}, {0x4}, {0x2, 0xa}, {0x2, 0xa}, {0x6, 0x4}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x5}, {0x1, 0xa}, {0x6, 0x4}, {0x7, 0x7}, {0x1}, {0x6, 0x4}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x4}, {0x2, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {0x1, 0x2}, {0x7, 0x7}, {0x3, 0x5}, {0x7, 0x8}, {0x4, 0x3}, {0x0, 0xa}, {0x4, 0x8}, {0x4, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x3, 0x1}, {0x0, 0x9}, {0x2, 0xa}, {0x0, 0x1}, {0x1, 0x3}, {0x6, 0x3}, {0x1, 0x2}, {}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x4, 0x8}, {0x2, 0x4}, {0x6, 0x3}, {0x7, 0x6}, {0x4, 0x8}, {0x6, 0x9}, {0x3, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2, 0x1f, 0x1, 0x3, 0x226e, 0x2, 0x20]}}]}, @NL80211_BAND_6GHZ={0x140, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x3, 0x36, 0xc, 0x2, 0x1b, 0x6c, 0x6c, 0x60, 0x36, 0x18, 0x18, 0x5, 0x11, 0x2, 0x6, 0x5, 0xb, 0x6c, 0x30, 0xb, 0x5, 0x3, 0x9, 0xc, 0x12]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x5, 0x30, 0x12, 0x6c, 0x6c, 0x1b, 0xc, 0x12, 0x64, 0x6, 0x0, 0x24, 0x48, 0x1b, 0x36, 0x3, 0x30, 0x48, 0x48, 0x5d, 0x36, 0x3, 0x12, 0x2, 0x1]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x8}, {0x0, 0x8}, {0x3, 0x9}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x8}, {0x5, 0x9}, {0x3, 0x9}, {0x5, 0x1}, {0x0, 0x8}, {0x1, 0x6}, {0x7}, {0x6, 0x1}, {0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x1, 0x9}, {0x5}, {0x0, 0x7}, {0x0, 0x4}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x9}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4c, 0x2, [{}, {0x4, 0x3}, {0x7, 0x2}, {0x3, 0x8}, {0x3}, {0x7, 0x8}, {0x6, 0x4}, {0x1, 0x8}, {0x0, 0x4}, {0x5, 0xa}, {0x1}, {0x6, 0x8}, {0x5, 0xa}, {0x4, 0x7}, {0x0, 0x5}, {0x3, 0xa}, {0x3, 0x7}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x8}, {0x3, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x6, 0x1}, {0x4, 0xa}, {0x2, 0x9}, {0x3, 0x3}, {0x2, 0x1c}, {0x1, 0x8}, {0x4}, {0x1, 0x4}, {0x6, 0xa}, {0x6, 0x6}, {0x1, 0x8}, {0x2, 0x5}, {0x0, 0x8}, {0x1}, {0x3, 0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x5, 0x5}, {0x4, 0x6}, {0x6, 0x9}, {0x5, 0x1}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x5}, {0x4, 0x5}, {0x1, 0x1}, {0x7, 0x8}, {0x6, 0x4}, {0x7, 0x3}, {0x4, 0x4}, {0x4, 0xa}, {0x0, 0x2}, {0x2, 0xa}, {0x3, 0x3}, {0x1, 0x8}, {0x7}, {0x4, 0x2}, {0x3, 0x7}, {0x2, 0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x4}, {0x6, 0x1}, {0x1, 0x4}, {0x4, 0x8}, {0x2, 0x2}, {0x7}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x4}, {0x1, 0x7}, {0x7, 0x8}, {0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x3}, {0x4, 0x5}, {0x4, 0x1}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x7}, {0x4, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x6, 0x2}, {0x2}, {0x2, 0x9}, {0x4, 0x5}, {0x3, 0x2}, {0x7, 0x3}, {0x6, 0x3}, {0x7, 0x7}, {0x5, 0x8}, {0x0, 0x2}, {0x6, 0x1}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{}, {0x7, 0x2}, {0x6, 0x6}, {0x5, 0x4}, {0x7, 0x2}, {0x5, 0x4}, {0x6, 0x3}, {0x5, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x3}, {0x5, 0x3}, {0x1, 0x7}, {0x1, 0x4}, {0x6, 0x9}, {0x2, 0x3}, {}, {0x6, 0x9}, {0x2, 0x7}, {0x7, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x2}, {0x7}, {0x6}, {0x5, 0xa}, {0x5, 0x2}, {0x3, 0x3}, {0x0, 0x2}, {0x1, 0x4}, {0x4, 0x8}, {0x0, 0x2}, {0x2}, {0x6, 0xa}, {0x0, 0x1}, {0x1, 0x8}, {0x4, 0x4}, {0x3, 0x9}, {0x6, 0x6}, {0x6, 0x7}, {0x4, 0x7}, {0x2, 0x3}, {0x1}, {0x4}, {0x2, 0xa}, {0x7, 0x7}, {0x4}, {0x3, 0x7}, {0x0, 0x2}, {0x4, 0x6}, {0x7, 0x9}, {0x2, 0x2}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff01, 0x1, 0x1f, 0x4, 0x2b, 0x4, 0x5, 0x401]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x7, 0x9, 0xfcb3, 0xc660, 0x9a, 0x7fff, 0x3]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x4}, {0x7, 0x9}, {0x4, 0x8}, {0x4, 0x5}, {0x2, 0x1}, {0x1, 0x8}, {0x7, 0x7}, {0x7, 0x5}, {0x3, 0xa}, {0x2, 0x8}, {0x6, 0x6}, {0x5, 0x6}, {0x4, 0x9}, {0x6, 0x4}, {0x6, 0x8}, {0x2, 0x6}, {0x2}, {0x7}, {0x1, 0x4}, {0x2, 0x7}, {0x6, 0xa}, {0x0, 0x5}, {0x5}, {0x0, 0x4}, {0x4, 0x7}, {0x7, 0x4}, {0x0, 0x7}, {0x3}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x9}, {0x7, 0x3}, {0x3, 0x8}, {0x1, 0x7}, {0x3, 0x7}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x4}, {0x7, 0x3}, {0x3, 0x7}, {0x1, 0x9}, {0x1, 0x8}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x2, 0x6}, {0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x5}, {0x7, 0x2}, {0x3, 0x6}, {0x2, 0x9}, {0x3, 0xa}, {0x7, 0x3}, {0x2, 0x2}, {0x5, 0x3}, {0x2, 0x6}, {0x0, 0x8}, {0x6, 0x4}, {0x1, 0x6}, {0x7, 0x4}, {0x2, 0x5}, {0x0, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x26}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x36}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x50}]}]}]}, 0x1548}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:17:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xd4, "544d056968f26f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000340)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {0x0, r5}], 0x5, "b53acec1810ff0"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004ad40)=ANY=[@ANYRES64=0x0, @ANYBLOB="115000000000000033b20000000000000800000000000000090000000000000008000000000000000100000000000000070000000100000000000000ff0300000500000000000000080000000000000003000000000000001b000000000000003000000000000000000000000000000000000000000000000000000000000000000000b2c9053e91b20f6b1aaa7fd129e500000000000000"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004ae00)={0x83a0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r7}, {r10}], 0xe1, "07eeae3f613c6c"}) r11 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000380)) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r12, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r11, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r13, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2872.541415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2872.566558] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2872.580649] Module has invalid ELF structures [ 2872.584920] Module has invalid ELF structures 10:17:18 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x8) [ 2872.623703] Module has invalid ELF structures 10:17:18 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x400000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) [ 2872.643088] Module has invalid ELF structures [ 2872.772303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2872.777333] Module has invalid ELF structures [ 2872.821143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:17:31 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x500000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:17:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:17:31 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x800000, 0x0, 0x0) 10:17:31 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x2000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:17:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f00000002c0)={0x5, 0x6, 0x1, 0x1, 0x3, [0x20, 0x3957, 0x6, 0x669f]}) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r2, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xffffffffffffff48}]}, 0x20}, 0x1, 0x0, 0x0, 0x891}, 0x24004000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r4, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:17:31 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\t', 0x972efd1746e42b46) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x880, 0x0) r4 = getpid() r5 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xf8, 0x5, 0x81, 0x0, 0x0, 0x3f, 0x30, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x3, 0x7}, 0x14820, 0xff, 0x3a, 0x2, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, r4, 0x2, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x4, 0x7f, 0x3, 0xb97, 0x7, 0xfe2}, {0x2, 0x3, 0x3, 0x9, 0x3, 0xa7}], ['\x00', '\x00', '\x00', '\x00']}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1a, 0x1, 0x7, 0x1, 0x0, 0x7, 0x304a4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3b, 0xedebb04332d01958, @perf_config_ext={0x891f, 0x80000000}, 0x8080, 0x0, 0xcdc, 0x2, 0x10000, 0x5e1, 0x0, 0x0, 0x5, 0x0, 0x6}, r2, 0x7, r3, 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) openat(r6, &(0x7f0000000280)='./file1\x00', 0x2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r7, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:17:31 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x9) 10:17:31 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2005a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2886.002081] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2886.014837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2886.038631] Module has invalid ELF structures [ 2886.066060] Module has invalid ELF structures [ 2886.066531] Module has invalid ELF structures [ 2886.068346] Module has invalid ELF structures 10:17:31 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0xa) 10:17:31 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x600000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:17:31 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x2000000, 0x0, 0x0) 10:17:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000080), &(0x7f0000000140)=@v3={0x3000000, [{0x3, 0x20}, {0x1f, 0x7ff}]}, 0x18, 0x1) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:17:31 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000100)={r2, 0x8001, 0x1}) [ 2886.309482] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:17:31 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x9840500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x36) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2886.338862] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:17:31 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x3000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:17:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="700000001e0075b90000000000000000fcc300000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000002400090000000000000000000000000000000000000000000000000000000000000000000c001500000000000000000017026433f2b27b0f021cf9c19d704fc4d38fac9b9ad6b72481b56426912e95d8633d871bcddaf2248be6420827dd97"], 0x70}}, 0x0) ioctl(r3, 0x9, &(0x7f0000000140)="5f3321e060071b8dec6a783b277ef40cbe5953b95f104ad7a3fc6dcd5b6073f0982dbfbd82dbfbb66e9bf2ac475aa9b3793d65932eeba84d8bb89a29c2df6cee4c62b64376") inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000000640)={{r4}, "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"}) connect$inet6(r5, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) [ 2886.389833] Module has invalid ELF structures 10:17:31 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x700000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:17:31 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0xb) [ 2886.461801] Module has invalid ELF structures [ 2886.466613] Module has invalid ELF structures [ 2886.532093] Module has invalid ELF structures [ 2886.558891] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2886.590154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2886.611880] Module has invalid ELF structures 10:17:32 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x3000000, 0x0, 0x0) 10:17:46 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0xc) 10:17:46 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12868}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xffffff62) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:17:46 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x4000000, 0x0, 0x0) 10:17:46 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xc00000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:17:46 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) r3 = syz_open_dev$mouse(&(0x7f0000000200), 0x40, 0x14000) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7566646e6f3d8df837b549979f152551d77afd14ce56f897c228606a3ce7f1a54df09b1ae638f3be9adb96e95d970e503afa123a2d110cd313", @ANYRESHEX, @ANYBLOB=',nodevmap,access=any,version=9p2000.u,dfltgid=', @ANYRESHEX=r4, @ANYBLOB="2c76657273696f6e3d3970323030302c64656275673d3078303030303030303030303030303030372c70726976706f72742c666f776e65723d3ba99e181e4ac30aeaf8e3f6ece9", @ANYRESDEC=r5, @ANYBLOB="2c66736e616d653d3f44634307b8af6c25d84e232c646566636f6e746578743d756e636f6e66696e65645f752c6d6561737572652c736d61636b66736861743d272c27412c7365636c6162656c2c7063723d30303030303030303030303030303030303035312c646566636f6e746578743d757365725f752c61707072616973652c00"]) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010006000000000002000100", @ANYRES32=0xee00, @ANYBLOB="040003000000000008000000", @ANYRES32=r4, @ANYBLOB="083b8e47bc6a1e6a49efff000000000000", @ANYRES32=r6, @ANYBLOB="10000400000000002000010000000000"], 0x3c, 0x0) r7 = openat2(r2, &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)={0x2, 0x4, 0x5}, 0x18) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000400)) 10:17:46 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000140)=0x3ff) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000540)={0x0, 0x0, 0x100, 0x2}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {0xfffffffc}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, &(0x7f0000000080)='\x00', 0x2) finit_module(r1, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001e0075b90000000000000000fc0100000000000000000000090000000000000000000000fe8000000037d76b8d51dfd77c000000000000000000000024000900"/112], 0x70}}, 0x0) pwritev2(r3, &(0x7f0000000740)=[{&(0x7f0000000180)="3ca2c837867228c6e008f262638bc0d4f4fba93c5c518523986f2d9299d4f29225dc1da92a5aa0e398c4eee58090309a45e03db178be84d43902d2dee92279ea72c75e56b77f9374b1c142b4946bfdc564ad28cc86a4ee212b2020a85ac16da636a3378c4880a07546c7537f5111f3df072e50b0d9f2344dcecbdba338badb7276ce63919f73121e658a4023410ec2c5077eff516994dd57562972d930b17803e600b99bf75271ac3bfa9a6583009a86103110aa96ae00847cbaf8842ef4c646024abdfdb534fc0a73b4e5da39edc8ef232a33e8bed8fc9a46686c6d79d01448b541efa5ffb5688d43937cc599c67e8673c6f118b3", 0xf5}, {&(0x7f00000002c0)="559910a675e5b9edf20f7bc28bcdefa982e4787039978a94b9bf3fb2abb0b62f8c07416bec1643e974ae620720684309b7179e025473d32df85fba2fa95051b03096ebea0e6382dc9244fcb0287e03fa5feaf1aa42a5a06c690ea99482c8e7841872c53df36021b6a7f89d16eb4507", 0x6f}, {&(0x7f0000000380)="4d7089024a393cf90f4ec90dc81a39dcbeb0eb0e4e9694714500e94377797886e05c12e4394cc8ea6f5097bd40", 0x2d}, {&(0x7f00000003c0)="348eb0b707f7363e602807f5c04c752c921b98f426e899601477da0439dbd97bdff30f923820", 0x26}, {&(0x7f0000000400)="5315ead753de8f2d0f3b3087584c306c673f6af6fce2320a701cc60419c43a1c496aee9310476bef2fbaba4f679cc0f8edd925a0fe2f95771041a23b6444b5ec6a041816bf31fecebbbbf38c57a0a3474627af94a4e84d4405e618f763934bfffb509dcd21c20b115f784ef58c05d50d5efd06e07f557c1b554bc4d078f76968e8b7235061a1623a2f4a81fd679cdfada46d23963a7608bff98930", 0x9b}, {&(0x7f00000004c0)="32462f07aa8ec88c0ad529c8b43415", 0xf}, {&(0x7f0000000500)="fa687068a091f5c0e7447c956f165aa339a96af061de28c23e401ba89376d123bebe6d17b07b4a64ca7e8bcfab13264126cf2b32f1", 0x35}], 0x7, 0x9, 0xfffffffd, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) 10:17:46 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x4000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:17:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)=@ethtool_eee={0x44}}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r1, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x951) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000140)={&(0x7f0000000740)=""/212, 0xd4, 0xa55f, 0x1ff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r4, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) [ 2901.004504] Module has invalid ELF structures [ 2901.008915] Module has invalid ELF structures [ 2901.017392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2901.024598] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2901.033696] Module has invalid ELF structures [ 2901.035709] Module has invalid ELF structures [ 2901.043802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2901.064576] Module has invalid ELF structures 10:17:46 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x6000000, 0x0, 0x0) 10:17:46 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d5", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = getgid() mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x4, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}, {@cache_mmap}, {@cache_none}], [{@fsname={'fsname', 0x3d, '-:#}'}}, {@audit}]}}) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r4, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:17:46 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0xf) 10:17:46 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000080)='\xe7', 0x2) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$RTC_UIE_OFF(r3, 0x7004) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) [ 2901.344942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:17:46 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4012, r0, 0x86650000) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="700000001e0075b90000000000000000fc010000000000f4ffffff00000000000000000000000000fe80000000000000000000000000000000000000000000002400090000000000000000000000000000000000000000000000000000000000000000000c001500000000000000000074d6b9646be5a7de2ad9d9b38101a68a85dbab6495ed881d52e720858b564f40a8f4c0fe0870298745fff66ff0913b5abc7a65d98447a1874e48819f9ecdd6ffa76a9038a096e69a2bbb4dd2e0c23a3c7b43c643a47555f5"], 0x70}}, 0x0) r3 = syz_io_uring_complete(0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000140)={{r3}, 0x4, 0x8001, 0xfb93}) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2901.396043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:17:46 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x1c00000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:17:46 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0xc000000, 0x0, 0x0) 10:17:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000740), 0x28a381, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000780), &(0x7f00000007c0)={'L+', 0x100000000}, 0x16, 0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x0, 0x7e, 0x9, 0x40, @private1, @local, 0x790, 0x20, 0x0, 0x5}}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={r3, @private=0xa010100, @multicast2}, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r4, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000580)={'sit0\x00', &(0x7f00000002c0)={'syztnl0\x00', r5, 0x4, 0x81, 0x8, 0x4, 0xc, @mcast2, @empty, 0x1, 0x10, 0xffff, 0x5}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r5, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:17:46 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa", 0x9) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x5000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x0) 10:17:46 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x10) [ 2901.498824] Module has invalid ELF structures [ 2901.524175] Module has invalid ELF structures [ 2901.599432] Module has invalid ELF structures [ 2901.631456] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2901.658757] Module has invalid ELF structures [ 2901.682535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:17:47 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x11) 10:17:47 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d", 0xf) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x406e2, 0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xac}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000013c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd, 0x0, 0xf8, 0x80000001, 0xa, 0x1, {0x3, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)="12c41a8f10cc4e3db937971d8c01f1dbedcaa479497f8251c5cec4ba8d7068776101442e0157cce458e90c1411217485629e33dd3cf380903a0427787fe7a3a66fb77376cbb69f1255d565c219ad699087258098394f7e738fc0217cab5cf1a5fc1859cac6e3fb658939132a9ca8e5fafce6d8b90ce7d6e3f56f33b4ffc0e1299f026726a819c405864c27439df79d9fca4669460513364aa8f91f969fa5e1bff0cb19a28f5e640b5e22b16f5cedd97274f312bdc1a89df168706b12d48b20df24dac823391d1b472c59b30a29dd1cac2cc6ea34872d7f7f9b6d04435fdac927fc1cc547cd14b7d6eea6580cb95d30", 0xef}, {&(0x7f0000000480)="17030f27f114ba04157051441fb28f22ae54e4d85acb02e31380ec400d57b2e79efa5a4c64358cfe26f143c4ca96125bb73211832d1eab", 0x37}, {&(0x7f0000000740)="953a56a41a4b630df51078ecba9b36881f30337496f60eae99f2c8d70d55a227fc4c8fe988fa84fc08338f3411e4a7bc27e652890c5c807e94fd53d6e495542add18575aa4428364aef799b96ebddc644ba2dd07111d56ff7e41e8e0760d00ea2597f90948a8b71937ed748894426409c2fd429e9c68fb68816161bbd7dcf63acc48fe7c7d51e9600ceb7caf68b1000782542ce8ea8201da5f37b7ae8db24bd37e948d1d705c9c2a5f5229695957534fddd7c84bb0f30b2ea561177b329662cc3a32c3c35467648d654b04", 0xcb}, {&(0x7f00000004c0)="9dfc82633b275d09f2862e55f30acc714fabd71adae16be7b2fa8c20076ed20c5e8f5b60386f3e38849e30707ca45855efe1d823aec02a4550de1ae4044974f3d92601c34656fdc7dac7a90d797f96", 0x4f}], 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="0001000000000000110000005f00000045ddaf113ca1aea28a94c85670486ba80234be18c13f54b1d6cafe164f18a4a94fe19a468fb85ce97185bc7bdcf2a27bd1ee86bf283fa544fa93f2ffd223e49e8680d1c83e69c0bb1e83d0d600ca5efa057db72c8dc9c41d0134b8ffd4f07bf859a197beeefb95d61caf43085106e97cdc9daf684f29cec33b0dc2351aad1dc0664a945fbe2d1fd88344442458afb5809af1467a7792921a3a1142dcacc075512c01721cf2b48f6e0af4ecc95763caeabef9ea5cd5af1a70c7b42ecc465c7a3783a437f7f9ffbb330aec18a86733c88516876c780d6536286c0bccb0ef18115d994ebba24aaaddf08d1d00000000000048000000000000000b0100000700000010058e14cbeaee9a223384ac97d51dd18844ac3347a7ea0e139bea0f6b311ebc69ee894d9de5e12d8cfd47929a46f888afd40000000000005800000000000000190100000800000074e41cf1eaaa04bff666963468978dd903f01fba34bf36b4f29385bbd6e07886c682cc61b2c66345b826b65f0a11ae06b62c6309b59a25459c95c70bd6b986cf2336b9ef18933d00f800000000000000010000000600000027408c70604625c3ba4faa1691bb1eaa8be28d6906d5d7f2bb32b9adedf2198a5dee881913fb8d83bb73a497839c6b8cf94a71986f0578ce17e06979c015cbf2414e1745c0311c4a26ebe57ad30ec50b02b9c4156a5b575e6a3f4111c08b1cd5f35f35c4be584257126ce32b22ae7429d4817e659f12417ef269f779f4438dca82f6bf596e0e819bf940e2a4eea4d4586feff7b3f32c5f2ed4c8f27ce5a7499ec692562ca7270eebcd555dd1e55336737369a749d919ebe9fecb5275a9ed5f6e76a86248e771df869f740fb4ffbe11b2b6c7d445b9b1f9c6a6da1fc2d2cbbd63750000000000000038000000000000001201000004000000a876b9b13b754524480a4bfb0f9aab80247a62d5b1bd7c49a7747caf9ff64783ce653c94b46700008c4098887942108159025c8521a59e854f99125cab55503901cc0d4995d8342c4b544269c0309d23a98cfda352f00392b93c3d96e007be63c291cc14c3da3dccc605aa5c"], 0x2d0}, 0x0, 0x4000}, 0x8) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x80, 0x6, 0x2, 0x33, 0x0, 0x4, 0x4000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000080)}, 0x5800, 0x2, 0xe3df, 0x7, 0x4, 0x1916, 0x8, 0x0, 0x7, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x1) [ 2901.816025] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2901.837779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:17:47 executing program 3: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000480)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = inotify_init1(0x0) creat(&(0x7f0000000000)='.\x00', 0x140) inotify_add_watch(r5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x9a59aeffb595af79, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7e6a, &(0x7f00000002c0)={0x0, 0x4f21, 0x0, 0x0, 0x6, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x541}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x12000000, 0x0, 0x0) 10:17:47 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0xffffffff00000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, 0x0}, 0x0, 0x4000000}, 0x0) 10:17:47 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x1) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa058687", 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000060e) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000540)={{'\x00', 0x3}, {0x7}, 0x0, 0x0, 0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="94c8c481bb623344b9adbc4ad36906e7b7ac2e61efa33141aa81d204dcd79d32afe2dfce9e62a4f939bc53e21a2cd9c4a0915305e5a505f14b96218c45e4775953c8441bd1a5d6ebcf65b48cbb12ada77cde5a856d8d126f81526e7f1ad11086c1743d792568f4989a3aad5e5ece722d0bc1dabaac460db8e2ee65155a38752e8b62cdddb84b970141aec87dee72e368eb5a185d35bf12623a5294cdf44e2a4778bccf636b9decb76905b581c1224374fa52ef0da639e9d882b8bf092c40e6c083075d7264ce3cb5ec8f9952f42a4d8369d52c24b1fafa941b4ec25346ac73270d0b19e6920a67befe331aca029a5ecc", 0xf0, 0x0, &(0x7f0000000380)={0x2, 0x160, {0x1, 0xc, 0x94, "0f7e6c7bc4b97ab9f9a6c188169e37661836deed7014c0ef42b5615defbeb5b60e03dd57e4c52e71e6942520d5722bd047c05834ba857e1701feba102116adfc46256b79af8d05552bd87930a4edd13e746c8e612ffa9f85228466b2992eb8153b879c16775988f31169745a51556dcd41a587a387dba56adb46115b537927f575a4a740c5e6260876e52c30b353787fab3eb3e8", 0xbf, "4be19eb20af70c4a52a7f01011229f3753ddc910ca85f237e9401309c4d7707959e418cf950eb784f1294307a9ada941c02bb49d82970703162a7a14dc753a6e06c52e620b55a5f4036c098ceb3704e22ccbe36a0401e87283dbbcce57c9061a8950e87c020ab27ebcd53229f5c2b640022a61d261a6e67f501459142224ccd1de5826d15ba43a4a55714322b8adc177b34ca747ca654cf9dced4a0361f19e3cf9a1ed4627092d86e2e66b7d01d0c380a8eb9764603b7b2d05eddcbc25130e"}, 0x26, "b247e5ef7f5cc03429d07aee1f512ad28f19ea49e86dfb61fccfe944e7eae05f70aabd97d549"}, 0x192}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x44001) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x70, 0x1e, 0x199537634de6b975, 0x0, 0x0, {{@in6=@private1}, @in6=@dev}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) write(r3, &(0x7f0000000740)="2f970d6252149428f436bbaeb2a3bdb0b8bd43cb04ab14fa5ecf2ab65ca40368fa53523cfe2f32d8c0fada6b19ceff152c8df742e15777fad8da9343dcae46f3a68a9377e3916159d4f085a752b9e8e464ba06a0e422172b479a84a2b57ee3bc061687b90f3d1d0616accaa274f80468b755b418609ac1efd4aaa6aa585e0724f28fee37d80f406cb1b1d4d2df4f91dab50c9bfa02adffefe6", 0x99) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 10:17:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000840)='./file1\x00', 0x100, 0x28) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write(r0, &(0x7f00000000c0)="30b6cc7792d77556fa05868719d55d985b6d1a55cff83109", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x4000060e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ll={0x11, 0x3, r3, 0x1, 0x9, 0x6, @random="4c0e0d00b345"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="6009697d3d77e108d7f76346b0651d93105644988b6257e17897cb0a2141e7e0fcdc212218aa74e5a73849ce47c91ecb5ae17e88740a751c59562f93eade692e29b50aa4d4b0e7b39853a3c056acd6690544cc244d7a277f87e9784ca9e467df14885e38207e7a9bd16acd8fe7ad9b4c9e6babc0811f80a754d4037902cad712f9379160dbf2ed3bf8d92b23e824714ca140b3cd4b3513eb2c26f774", 0x9c}, {&(0x7f0000000740)="09bc51aa48871b5acf113f22f3b27febed318fd31fd4be8d4b6734d017adc3a49970e6be67ed58190a2b3700d4e3ad58d6e4a84b3d9e48497c6ad815355b53856d1865b19195e322cef6fcdbc34a0e95f7f61cafa2aeb0e524e49ed6e3a9d1b65ce544edf7f85a32115694562bbf79cab34a19fa6a300f1e483a85811370339ac256fc0605e32c25bdfaa82c478db1c37f3a14712a0617a239327bf192064ed528985e963f1f90105893c2abb70e982e94e8b4ad5927dc42f886f83bcbc7e5d64a8024acbf5f056db17b15f99a15f43c9a", 0xd1}, {&(0x7f0000000280)="ae5dfa7785c626f09efcd39f36aa4cb0587476f17a141cbc23e80e80227800bf6c2c12f1ef9805028c5e279400506538f570fb7f305ed6e33dc5d7849b81e2241dd677230072c96a4b37b8be237712b1ec85ef26f6d6a40f1cfab3ff82d71663a00a51adf6c782c4c4d23fb66acaf371a655d306", 0x74}, {&(0x7f0000000300)="3f3f5eb19699b2cebee1441669aa56c0ec7b4148f3c315d27a3453b998201d021de4eb0d23749153dcdbd4df111d2893fea6", 0x32}], 0x4}, 0x0, 0x4000000, 0x1}, 0x0) 10:17:47 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x12) [ 2902.016827] Module has invalid ELF structures [ 2902.020975] Module has invalid ELF structures [ 2902.040332] Module has invalid ELF structures [ 2902.060178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. VM DIAGNOSIS: 10:22:48 Registers: info registers vcpu 0 RAX=ffffffff83e953c0 RBX=0000000000000000 RCX=ffffffff83e7d02c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e95b88 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85679448 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e953ce RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd123125010 CR3=000000000ca6c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000ff00000000000000000000 XMM02=00000000ff0000000000000000000000 XMM03=7500736461657268742e70756f726763 XMM04=00000000000000000000000000000001 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=703e2d73004c414954494e495f544e45 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e953c0 RBX=0000000000000001 RCX=ffffffff83e7d02c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e95b88 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85679448 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e953ce RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005581edfc99ac CR3=000000000dbb4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004184a2ec00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000