704.650002] ? __pfx___fget_files+0x10/0x10 [ 1704.650590] ? lock_acquire+0x32/0xc0 [ 1704.651132] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1704.651745] __x64_sys_ioctl+0x19e/0x210 [ 1704.652324] do_syscall_64+0x3f/0x90 [ 1704.652842] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1704.653540] RIP: 0033:0x7f59fcc15b19 [ 1704.654036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1704.656355] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1704.657332] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1704.658260] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1704.659183] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1704.660110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1704.661022] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1704.661971] 04:52:17 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd5:\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1704.741391] Invalid ELF header magic: != ELF 04:52:18 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 29) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:18 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) [ 1704.782204] Invalid ELF header magic: != ELF 04:52:18 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 21) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:18 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 29) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:18 executing program 3: syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x1}}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1, 0x1}}}}, 0x21) 04:52:18 executing program 7: syz_80211_inject_frame(&(0x7f0000003140), 0x0, 0x0) 04:52:18 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 35) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1704.955107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.959573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.980563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:52:31 executing program 3: syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x1}}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1, 0x1}}}}, 0x21) 04:52:31 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 36) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:31 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\tsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:52:31 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:52:31 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 30) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:31 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 30) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:31 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 22) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:31 executing program 7: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1, 0x1}}}}, 0x21) [ 1718.362673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1718.365056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1718.368771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1718.391481] FAULT_INJECTION: forcing a failure. [ 1718.391481] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.393147] CPU: 0 PID: 9473 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1718.393858] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1718.394639] Call Trace: [ 1718.394887] [ 1718.395103] dump_stack_lvl+0x8f/0xb7 [ 1718.395477] should_fail_ex.cold+0x5/0xa [ 1718.395857] ? __kernfs_new_node+0xd4/0x8c0 [ 1718.396293] should_failslab+0x9/0x20 [ 1718.396646] kmem_cache_alloc+0x5a/0x410 [ 1718.397032] __kernfs_new_node+0xd4/0x8c0 [ 1718.397426] ? kernfs_add_one+0x17a/0x4f0 [ 1718.397815] ? __pfx___kernfs_new_node+0x10/0x10 [ 1718.398275] ? lock_is_held_type+0xdb/0x130 [ 1718.398670] ? find_held_lock+0x2c/0x110 [ 1718.399090] ? lock_release+0x3b6/0x750 [ 1718.399459] ? sysfs_do_create_link_sd+0x82/0x140 [ 1718.399910] kernfs_new_node+0x97/0x120 [ 1718.400318] kernfs_create_link+0xcf/0x240 [ 1718.400607] sysfs_do_create_link_sd+0x90/0x140 [ 1718.400921] sysfs_create_link+0x63/0xc0 [ 1718.401202] device_add+0x552/0x1ec0 [ 1718.401457] ? __pfx_dev_set_name+0x10/0x10 [ 1718.401748] ? __pfx_device_add+0x10/0x10 [ 1718.402034] ? __init_waitqueue_head+0xca/0x150 [ 1718.402355] netdev_register_kobject+0x17e/0x3b0 [ 1718.402671] register_netdevice+0xd60/0x1530 [ 1718.402999] ? __pfx_register_netdevice+0x10/0x10 [ 1718.403335] ? dev_addr_mod+0x29e/0x350 [ 1718.403627] __tun_chr_ioctl+0x210b/0x3f80 [ 1718.403923] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1718.404267] ? __pfx___fget_files+0x10/0x10 [ 1718.404549] ? lock_acquire+0x32/0xc0 [ 1718.404820] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1718.405121] __x64_sys_ioctl+0x19e/0x210 [ 1718.405396] do_syscall_64+0x3f/0x90 [ 1718.405650] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1718.406001] RIP: 0033:0x7ff461a5bb19 [ 1718.406249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1718.407365] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.407842] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1718.408305] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1718.408746] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1718.409195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1718.409638] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1718.410102] [ 1718.437396] Invalid ELF header magic: != ELF [ 1718.456667] FAULT_INJECTION: forcing a failure. [ 1718.456667] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.458850] CPU: 1 PID: 9468 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1718.459835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1718.460842] Call Trace: [ 1718.461181] [ 1718.461484] dump_stack_lvl+0x8f/0xb7 [ 1718.462010] should_fail_ex.cold+0x5/0xa [ 1718.462553] ? __kernfs_new_node+0xd4/0x8c0 [ 1718.463128] should_failslab+0x9/0x20 [ 1718.463642] kmem_cache_alloc+0x5a/0x410 [ 1718.464190] ? __lock_acquire+0x164d/0x5e70 [ 1718.464774] __kernfs_new_node+0xd4/0x8c0 [ 1718.465340] ? __pfx___kernfs_new_node+0x10/0x10 [ 1718.465972] ? find_held_lock+0x2c/0x110 [ 1718.466517] ? lock_release+0x3b6/0x750 [ 1718.467054] ? __kernfs_new_node+0x2d7/0x8c0 [ 1718.467652] ? map_id_range_down+0x1c4/0x340 [ 1718.468280] kernfs_new_node+0x97/0x120 [ 1718.468811] __kernfs_create_file+0x55/0x350 [ 1718.469381] sysfs_add_file_mode_ns+0x21c/0x440 [ 1718.469992] ? __pfx_dev_attr_store+0x10/0x10 [ 1718.470574] internal_create_group+0x322/0xb20 [ 1718.471172] ? __pfx_internal_create_group+0x10/0x10 [ 1718.471816] ? kernfs_add_one+0x17a/0x4f0 [ 1718.472374] ? kernfs_create_link+0x1bb/0x240 [ 1718.472954] internal_create_groups.part.0+0x90/0x140 [ 1718.473616] sysfs_create_groups+0x29/0x50 [ 1718.474164] device_add+0x711/0x1ec0 [ 1718.474656] ? __pfx_dev_set_name+0x10/0x10 [ 1718.475212] ? __pfx_device_add+0x10/0x10 [ 1718.475753] ? __init_waitqueue_head+0xca/0x150 [ 1718.476385] netdev_register_kobject+0x17e/0x3b0 [ 1718.477014] register_netdevice+0xd60/0x1530 [ 1718.477596] ? __pfx_register_netdevice+0x10/0x10 [ 1718.478227] ? dev_addr_mod+0x29e/0x350 [ 1718.478747] __tun_chr_ioctl+0x210b/0x3f80 [ 1718.479304] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1718.479896] ? __pfx___fget_files+0x10/0x10 [ 1718.480463] ? lock_acquire+0x32/0xc0 [ 1718.480993] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1718.481570] __x64_sys_ioctl+0x19e/0x210 [ 1718.482096] do_syscall_64+0x3f/0x90 [ 1718.482599] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1718.483257] RIP: 0033:0x7f2e2b599b19 [ 1718.483746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1718.485955] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.486885] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1718.487767] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1718.488663] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1718.489536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1718.490408] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1718.491326] [ 1718.506403] FAULT_INJECTION: forcing a failure. [ 1718.506403] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.507989] CPU: 0 PID: 9479 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1718.508769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1718.509526] Call Trace: [ 1718.509786] [ 1718.510017] dump_stack_lvl+0x8f/0xb7 [ 1718.510404] should_fail_ex.cold+0x5/0xa [ 1718.510819] should_failslab+0x9/0x20 [ 1718.511204] __kmem_cache_alloc_node+0x5b/0x400 [ 1718.511666] ? device_add+0x10f1/0x1ec0 [ 1718.512060] ? lock_is_held_type+0xdb/0x130 [ 1718.512504] kmalloc_trace+0x26/0x60 [ 1718.512891] device_add+0x10f1/0x1ec0 [ 1718.513277] ? dev_set_name+0xbf/0x100 [ 1718.513675] ? __pfx_dev_set_name+0x10/0x10 [ 1718.514114] ? __pfx_device_add+0x10/0x10 [ 1718.514522] ? __init_waitqueue_head+0xca/0x150 [ 1718.514993] netdev_register_kobject+0x17e/0x3b0 [ 1718.515458] register_netdevice+0xd60/0x1530 [ 1718.515903] ? __pfx_register_netdevice+0x10/0x10 [ 1718.516390] ? dev_addr_mod+0x29e/0x350 [ 1718.516727] __tun_chr_ioctl+0x210b/0x3f80 [ 1718.517038] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1718.517362] ? lock_is_held_type+0xdb/0x130 [ 1718.517671] ? __pfx___fget_files+0x10/0x10 [ 1718.517975] ? lock_acquire+0x32/0xc0 [ 1718.518267] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1718.518582] __x64_sys_ioctl+0x19e/0x210 [ 1718.518873] do_syscall_64+0x3f/0x90 [ 1718.519178] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1718.519549] RIP: 0033:0x7f59fcc15b19 [ 1718.519814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1718.521033] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.521543] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1718.522035] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1718.522519] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1718.523020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1718.523506] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1718.524011] [ 1718.554137] Invalid ELF header magic: != ELF 04:52:31 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 37) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:31 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 31) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:31 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 23) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:31 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 31) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:31 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x10sTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:52:31 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:52:31 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:52:31 executing program 7: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x0, 0x1}}}}, 0x21) [ 1718.745250] Invalid ELF header magic: != ELF [ 1718.750663] FAULT_INJECTION: forcing a failure. [ 1718.750663] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.753262] CPU: 1 PID: 9491 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1718.754296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1718.755313] Call Trace: [ 1718.755656] [ 1718.755954] dump_stack_lvl+0x8f/0xb7 [ 1718.756500] should_fail_ex.cold+0x5/0xa [ 1718.757040] ? __kernfs_new_node+0xd4/0x8c0 [ 1718.757613] should_failslab+0x9/0x20 [ 1718.758122] kmem_cache_alloc+0x5a/0x410 [ 1718.758661] __kernfs_new_node+0xd4/0x8c0 [ 1718.759222] ? kernfs_add_one+0x17a/0x4f0 [ 1718.759767] ? __pfx___kernfs_new_node+0x10/0x10 [ 1718.760407] ? lock_is_held_type+0xdb/0x130 [ 1718.760971] ? find_held_lock+0x2c/0x110 [ 1718.761506] ? lock_release+0x3b6/0x750 [ 1718.762029] ? sysfs_do_create_link_sd+0x82/0x140 [ 1718.762664] kernfs_new_node+0x97/0x120 [ 1718.763210] kernfs_create_link+0xcf/0x240 [ 1718.763756] sysfs_do_create_link_sd+0x90/0x140 [ 1718.764376] sysfs_create_link+0x63/0xc0 [ 1718.764919] device_add+0x552/0x1ec0 [ 1718.765420] ? __pfx_dev_set_name+0x10/0x10 [ 1718.765987] ? __pfx_device_add+0x10/0x10 [ 1718.766526] ? __init_waitqueue_head+0xca/0x150 [ 1718.767149] netdev_register_kobject+0x17e/0x3b0 [ 1718.767785] register_netdevice+0xd60/0x1530 [ 1718.768382] ? __pfx_register_netdevice+0x10/0x10 [ 1718.769011] ? dev_addr_mod+0x29e/0x350 [ 1718.769524] __tun_chr_ioctl+0x210b/0x3f80 [ 1718.770072] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1718.770658] ? __pfx___fget_files+0x10/0x10 [ 1718.771218] ? lock_acquire+0x32/0xc0 [ 1718.771751] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1718.772328] __x64_sys_ioctl+0x19e/0x210 [ 1718.772859] do_syscall_64+0x3f/0x90 [ 1718.773359] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1718.774024] RIP: 0033:0x7fcb82d36b19 [ 1718.774493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1718.776680] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.777609] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1718.778476] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1718.779337] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1718.780223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1718.781087] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1718.781994] [ 1718.835930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1718.865325] Invalid ELF header magic: != ELF 04:52:32 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1718.966197] FAULT_INJECTION: forcing a failure. [ 1718.966197] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.967454] CPU: 0 PID: 9515 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1718.968031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1718.968621] Call Trace: [ 1718.968809] [ 1718.968979] dump_stack_lvl+0x8f/0xb7 [ 1718.969276] should_fail_ex.cold+0x5/0xa [ 1718.969580] ? kstrdup_const+0x57/0x80 [ 1718.969870] should_failslab+0x9/0x20 [ 1718.970154] __kmem_cache_alloc_node+0x5b/0x400 [ 1718.970501] ? kstrdup_const+0x57/0x80 [ 1718.970795] ? kstrdup_const+0x57/0x80 [ 1718.971079] __kmalloc_node_track_caller+0x43/0xb0 [ 1718.971447] kstrdup+0x3f/0x80 [ 1718.971689] kstrdup_const+0x57/0x80 [ 1718.971964] __kernfs_new_node+0x9d/0x8c0 [ 1718.972322] ? lock_release+0x3b6/0x750 [ 1718.972627] ? __pfx___kernfs_new_node+0x10/0x10 [ 1718.972995] ? __pfx_lock_release+0x10/0x10 [ 1718.973315] ? lock_acquire+0x32/0xc0 [ 1718.973605] ? lock_is_held_type+0xdb/0x130 [ 1718.973937] ? find_held_lock+0x2c/0x110 [ 1718.974238] ? lock_release+0x3b6/0x750 [ 1718.974534] ? sysfs_do_create_link_sd+0x82/0x140 [ 1718.974915] kernfs_new_node+0x97/0x120 [ 1718.975227] kernfs_create_link+0xcf/0x240 [ 1718.975547] sysfs_do_create_link_sd+0x90/0x140 [ 1718.975918] sysfs_create_link+0x63/0xc0 [ 1718.976246] device_add+0x676/0x1ec0 [ 1718.976531] ? __pfx_dev_set_name+0x10/0x10 [ 1718.976895] ? __pfx_device_add+0x10/0x10 [ 1718.977210] ? __init_waitqueue_head+0xca/0x150 [ 1718.977565] netdev_register_kobject+0x17e/0x3b0 [ 1718.977943] register_netdevice+0xd60/0x1530 [ 1718.978287] ? __pfx_register_netdevice+0x10/0x10 [ 1718.978650] ? dev_addr_mod+0x29e/0x350 [ 1718.978958] __tun_chr_ioctl+0x210b/0x3f80 [ 1718.979275] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1718.979575] ? __pfx___fget_files+0x10/0x10 [ 1718.979912] ? lock_acquire+0x32/0xc0 [ 1718.980192] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1718.980524] __x64_sys_ioctl+0x19e/0x210 [ 1718.980850] do_syscall_64+0x3f/0x90 [ 1718.981136] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1718.981522] RIP: 0033:0x7ff461a5bb19 [ 1718.981795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1718.983064] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.983601] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1718.984117] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1718.984621] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1718.985124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1718.985620] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1718.986137] 04:52:32 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:52:32 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54:sTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:52:32 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 32) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:32 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 24) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1719.072362] FAULT_INJECTION: forcing a failure. [ 1719.072362] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.074109] CPU: 0 PID: 9518 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1719.074685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1719.075262] Call Trace: [ 1719.075453] [ 1719.075620] dump_stack_lvl+0x8f/0xb7 [ 1719.075947] should_fail_ex.cold+0x5/0xa [ 1719.076266] ? __kernfs_new_node+0xd4/0x8c0 [ 1719.076596] should_failslab+0x9/0x20 [ 1719.076897] kmem_cache_alloc+0x5a/0x410 [ 1719.077202] ? kernfs_add_one+0x175/0x4f0 [ 1719.077519] __kernfs_new_node+0xd4/0x8c0 [ 1719.077843] ? __lock_acquire+0x164d/0x5e70 [ 1719.078164] ? __pfx___kernfs_new_node+0x10/0x10 [ 1719.078528] ? __pfx___lock_acquire+0x10/0x10 [ 1719.078880] ? kernfs_add_one+0x17a/0x4f0 [ 1719.079196] ? map_id_range_down+0x1c4/0x340 [ 1719.079496] kernfs_new_node+0x97/0x120 [ 1719.079834] __kernfs_create_file+0x55/0x350 [ 1719.080183] sysfs_add_file_mode_ns+0x21c/0x440 [ 1719.080535] ? __pfx_dev_attr_store+0x10/0x10 [ 1719.080891] sysfs_create_file_ns+0x12f/0x1d0 [ 1719.081230] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1719.081622] ? down_read+0x1a0/0x450 [ 1719.081923] ? __pfx___up_read+0x10/0x10 [ 1719.082242] device_create_file+0xee/0x1e0 [ 1719.082566] device_add+0x4c6/0x1ec0 [ 1719.082870] ? dev_set_name+0xbf/0x100 [ 1719.083165] ? __pfx_dev_set_name+0x10/0x10 [ 1719.083487] ? __pfx_device_add+0x10/0x10 [ 1719.083817] ? __init_waitqueue_head+0xca/0x150 [ 1719.084181] netdev_register_kobject+0x17e/0x3b0 [ 1719.084539] register_netdevice+0xd60/0x1530 [ 1719.084872] ? __pfx_register_netdevice+0x10/0x10 [ 1719.085226] ? dev_addr_mod+0x29e/0x350 [ 1719.085523] __tun_chr_ioctl+0x210b/0x3f80 [ 1719.085850] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1719.086186] ? __pfx___fget_files+0x10/0x10 [ 1719.086502] ? lock_acquire+0x32/0xc0 [ 1719.086776] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1719.087107] __x64_sys_ioctl+0x19e/0x210 [ 1719.087415] do_syscall_64+0x3f/0x90 [ 1719.087702] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1719.088094] RIP: 0033:0x7fcb82d36b19 [ 1719.088364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1719.089626] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1719.090165] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1719.090662] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1719.091165] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1719.091664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1719.092176] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1719.092695] [ 1719.199435] Invalid ELF header magic: != ELF [ 1719.233985] Invalid ELF header magic: != ELF 04:52:46 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 25) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:46 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 38) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:46 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:52:46 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 33) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:46 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 33) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:46 executing program 7: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x0, 0x1}}}}, 0x21) 04:52:46 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd5:\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:52:46 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54csTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1732.947493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1733.013558] Invalid ELF header magic: != ELF [ 1733.016296] Invalid ELF header magic: != ELF 04:52:46 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x0, 0x1}}}}, 0x21) [ 1733.091626] FAULT_INJECTION: forcing a failure. [ 1733.091626] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.094441] CPU: 1 PID: 9544 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1733.095476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1733.096514] Call Trace: [ 1733.096857] [ 1733.097161] dump_stack_lvl+0x8f/0xb7 [ 1733.097697] should_fail_ex.cold+0x5/0xa [ 1733.098245] ? __kernfs_new_node+0xd4/0x8c0 [ 1733.098828] should_failslab+0x9/0x20 [ 1733.099348] kmem_cache_alloc+0x5a/0x410 [ 1733.099889] ? irqentry_enter+0x2a/0x60 [ 1733.100453] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1733.101123] __kernfs_new_node+0xd4/0x8c0 [ 1733.101686] ? __pfx___kernfs_new_node+0x10/0x10 [ 1733.102346] ? mark_held_locks+0x9e/0xe0 [ 1733.102895] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1733.103617] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1733.104371] kernfs_new_node+0x97/0x120 [ 1733.104926] __kernfs_create_file+0x55/0x350 [ 1733.105525] sysfs_add_file_mode_ns+0x21c/0x440 [ 1733.105558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1733.106140] ? __pfx_dev_attr_store+0x10/0x10 [ 1733.106193] internal_create_group+0x322/0xb20 [ 1733.108484] ? __pfx_internal_create_group+0x10/0x10 [ 1733.109162] ? kernfs_add_one+0x17a/0x4f0 [ 1733.109737] ? kernfs_create_link+0x1bb/0x240 [ 1733.110344] internal_create_groups.part.0+0x90/0x140 [ 1733.111042] sysfs_create_groups+0x29/0x50 [ 1733.111621] device_add+0x711/0x1ec0 [ 1733.112131] ? __pfx_dev_set_name+0x10/0x10 [ 1733.112742] ? __pfx_device_add+0x10/0x10 [ 1733.113301] ? __init_waitqueue_head+0xca/0x150 [ 1733.113938] netdev_register_kobject+0x17e/0x3b0 [ 1733.114578] register_netdevice+0xd60/0x1530 [ 1733.115180] ? __pfx_register_netdevice+0x10/0x10 [ 1733.115834] ? dev_addr_mod+0x29e/0x350 [ 1733.116386] __tun_chr_ioctl+0x210b/0x3f80 [ 1733.116975] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1733.117581] ? __pfx___fget_files+0x10/0x10 [ 1733.118151] ? lock_acquire+0x32/0xc0 [ 1733.118693] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1733.119279] __x64_sys_ioctl+0x19e/0x210 [ 1733.119833] do_syscall_64+0x3f/0x90 [ 1733.120368] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1733.121064] RIP: 0033:0x7f2e2b599b19 [ 1733.121554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.123814] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1733.124808] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1733.125714] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1733.126619] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1733.127519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.128442] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1733.129375] 04:52:46 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0f#TI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:52:46 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 39) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:46 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 26) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:46 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, 0x0, 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:52:46 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 34) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1733.378580] Invalid ELF header magic: != ELF [ 1733.412577] FAULT_INJECTION: forcing a failure. [ 1733.412577] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.415323] CPU: 0 PID: 9562 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1733.416396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1733.417427] Call Trace: [ 1733.417775] [ 1733.418079] dump_stack_lvl+0x8f/0xb7 [ 1733.418606] should_fail_ex.cold+0x5/0xa [ 1733.419147] ? __kernfs_new_node+0xd4/0x8c0 [ 1733.419718] should_failslab+0x9/0x20 [ 1733.420225] kmem_cache_alloc+0x5a/0x410 [ 1733.420780] __kernfs_new_node+0xd4/0x8c0 [ 1733.421343] ? __pfx___kernfs_new_node+0x10/0x10 [ 1733.421962] ? map_id_range_down+0x1c4/0x340 [ 1733.422568] ? __pfx_map_id_range_down+0x10/0x10 [ 1733.423227] ? __lock_acquire+0x164d/0x5e70 [ 1733.423826] ? make_kgid+0x20/0x30 [ 1733.424341] kernfs_create_dir_ns+0xa0/0x230 [ 1733.424970] sysfs_create_dir_ns+0x12b/0x2a0 [ 1733.425575] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1733.426243] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1733.426858] ? kobject_add_internal+0x12f/0x8e0 [ 1733.427498] ? net_namespace+0xd/0x40 [ 1733.428023] ? device_namespace+0x99/0xe0 [ 1733.428634] kobject_add_internal+0x24c/0x8e0 [ 1733.429273] kobject_add+0x154/0x1d0 [ 1733.429811] ? __pfx_kobject_add+0x10/0x10 [ 1733.430410] ? lock_acquire+0x32/0xc0 [ 1733.430936] ? get_device_parent+0x123/0x5a0 [ 1733.431561] device_add+0x362/0x1ec0 [ 1733.432078] ? dev_set_name+0xbf/0x100 [ 1733.432632] ? __pfx_dev_set_name+0x10/0x10 [ 1733.433252] ? __pfx_device_add+0x10/0x10 [ 1733.433824] ? __init_waitqueue_head+0xca/0x150 [ 1733.434468] netdev_register_kobject+0x17e/0x3b0 [ 1733.435113] register_netdevice+0xd60/0x1530 [ 1733.435723] ? __pfx_register_netdevice+0x10/0x10 [ 1733.436381] ? dev_addr_mod+0x29e/0x350 [ 1733.436919] __tun_chr_ioctl+0x210b/0x3f80 [ 1733.437491] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1733.438106] ? __pfx___fget_files+0x10/0x10 [ 1733.438676] ? lock_acquire+0x32/0xc0 [ 1733.439216] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1733.439807] __x64_sys_ioctl+0x19e/0x210 [ 1733.440375] do_syscall_64+0x3f/0x90 [ 1733.440890] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1733.441578] RIP: 0033:0x7f59fcc15b19 [ 1733.442060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.444334] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1733.445300] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1733.446213] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1733.447120] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1733.448041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.448963] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1733.449917] [ 1733.451219] kobject_add_internal failed for rose0 (error: -12 parent: net) [ 1733.606554] FAULT_INJECTION: forcing a failure. [ 1733.606554] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.608513] CPU: 1 PID: 9567 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1733.609515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1733.610500] Call Trace: [ 1733.610829] [ 1733.611126] dump_stack_lvl+0x8f/0xb7 [ 1733.611638] should_fail_ex.cold+0x5/0xa [ 1733.612172] ? __kernfs_new_node+0xd4/0x8c0 [ 1733.612754] should_failslab+0x9/0x20 [ 1733.613249] kmem_cache_alloc+0x5a/0x410 [ 1733.613780] __kernfs_new_node+0xd4/0x8c0 [ 1733.614317] ? lock_release+0x3b6/0x750 [ 1733.614834] ? __pfx___kernfs_new_node+0x10/0x10 [ 1733.615449] ? __pfx_lock_release+0x10/0x10 [ 1733.616001] ? lock_acquire+0x32/0xc0 [ 1733.616525] ? lock_is_held_type+0xdb/0x130 [ 1733.617089] ? find_held_lock+0x2c/0x110 [ 1733.617635] ? lock_release+0x3b6/0x750 [ 1733.618175] ? sysfs_do_create_link_sd+0x82/0x140 [ 1733.618829] kernfs_new_node+0x97/0x120 [ 1733.619387] kernfs_create_link+0xcf/0x240 [ 1733.619948] sysfs_do_create_link_sd+0x90/0x140 [ 1733.620584] sysfs_create_link+0x63/0xc0 [ 1733.621123] device_add+0x676/0x1ec0 [ 1733.621639] ? __pfx_dev_set_name+0x10/0x10 [ 1733.622203] ? __pfx_device_add+0x10/0x10 [ 1733.622765] ? __init_waitqueue_head+0xca/0x150 [ 1733.623406] netdev_register_kobject+0x17e/0x3b0 [ 1733.624052] register_netdevice+0xd60/0x1530 [ 1733.624677] ? __pfx_register_netdevice+0x10/0x10 [ 1733.625331] ? dev_addr_mod+0x29e/0x350 [ 1733.625874] __tun_chr_ioctl+0x210b/0x3f80 [ 1733.626455] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1733.627077] ? __pfx___fget_files+0x10/0x10 [ 1733.627653] ? lock_acquire+0x32/0xc0 [ 1733.628206] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1733.628788] __x64_sys_ioctl+0x19e/0x210 [ 1733.629357] do_syscall_64+0x3f/0x90 [ 1733.629881] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1733.630573] RIP: 0033:0x7ff461a5bb19 [ 1733.631067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.633335] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1733.634309] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1733.635207] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1733.636106] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1733.637026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.637914] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1733.638833] 04:52:58 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x0, 0x1}}}}, 0x21) 04:52:58 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 34) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:58 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 40) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:58 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 35) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:58 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0f%TI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:52:58 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, 0x0, 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:52:58 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 27) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:58 executing program 7: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x0, 0x1}}}}, 0x21) [ 1745.684541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.695152] FAULT_INJECTION: forcing a failure. [ 1745.695152] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.696163] CPU: 1 PID: 9580 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1745.696730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1745.697289] Call Trace: [ 1745.697477] [ 1745.697642] dump_stack_lvl+0x8f/0xb7 [ 1745.697939] should_fail_ex.cold+0x5/0xa [ 1745.698236] ? __kernfs_new_node+0xd4/0x8c0 [ 1745.698552] should_failslab+0x9/0x20 [ 1745.698838] kmem_cache_alloc+0x5a/0x410 [ 1745.699143] __kernfs_new_node+0xd4/0x8c0 [ 1745.699453] ? __pfx___kernfs_new_node+0x10/0x10 [ 1745.699797] ? map_id_range_down+0x1c4/0x340 [ 1745.700127] ? __pfx_map_id_range_down+0x10/0x10 [ 1745.700493] ? __lock_acquire+0x164d/0x5e70 [ 1745.700811] ? make_kgid+0x20/0x30 [ 1745.701081] kernfs_create_dir_ns+0xa0/0x230 [ 1745.701411] sysfs_create_dir_ns+0x12b/0x2a0 [ 1745.701733] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1745.702090] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1745.702431] ? kobject_add_internal+0x12f/0x8e0 [ 1745.702771] ? net_namespace+0xd/0x40 [ 1745.703052] ? device_namespace+0x99/0xe0 [ 1745.703361] kobject_add_internal+0x24c/0x8e0 [ 1745.703696] kobject_add+0x154/0x1d0 [ 1745.703975] ? __pfx_kobject_add+0x10/0x10 [ 1745.704291] ? lock_acquire+0x32/0xc0 [ 1745.704579] ? get_device_parent+0x123/0x5a0 [ 1745.704914] device_add+0x362/0x1ec0 [ 1745.705189] ? dev_set_name+0xbf/0x100 [ 1745.705477] ? __pfx_dev_set_name+0x10/0x10 [ 1745.705795] ? __pfx_device_add+0x10/0x10 [ 1745.706101] ? __init_waitqueue_head+0xca/0x150 [ 1745.706444] netdev_register_kobject+0x17e/0x3b0 [ 1745.706790] register_netdevice+0xd60/0x1530 [ 1745.707118] ? __pfx_register_netdevice+0x10/0x10 [ 1745.707472] ? dev_addr_mod+0x29e/0x350 [ 1745.707762] __tun_chr_ioctl+0x210b/0x3f80 [ 1745.708073] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1745.708407] ? __pfx___fget_files+0x10/0x10 [ 1745.708737] ? lock_acquire+0x32/0xc0 [ 1745.709028] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1745.709352] __x64_sys_ioctl+0x19e/0x210 [ 1745.709649] do_syscall_64+0x3f/0x90 [ 1745.709930] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1745.710305] RIP: 0033:0x7f59fcc15b19 [ 1745.710572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1745.711795] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1745.712323] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1745.712820] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1745.713319] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1745.713823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1745.714325] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1745.714832] [ 1745.715432] kobject_add_internal failed for rose0 (error: -12 parent: net) [ 1745.726524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.749065] Invalid ELF header magic: != ELF [ 1745.793604] FAULT_INJECTION: forcing a failure. [ 1745.793604] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.795103] CPU: 1 PID: 9588 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1745.795674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1745.796241] Call Trace: [ 1745.796436] [ 1745.796603] dump_stack_lvl+0x8f/0xb7 [ 1745.796899] should_fail_ex.cold+0x5/0xa [ 1745.797206] ? __kernfs_new_node+0xd4/0x8c0 [ 1745.797524] should_failslab+0x9/0x20 [ 1745.797806] kmem_cache_alloc+0x5a/0x410 [ 1745.798112] __kernfs_new_node+0xd4/0x8c0 [ 1745.798421] ? lock_release+0x3b6/0x750 [ 1745.798716] ? __pfx___kernfs_new_node+0x10/0x10 [ 1745.799064] ? __pfx_lock_release+0x10/0x10 [ 1745.799396] ? lock_acquire+0x32/0xc0 [ 1745.799680] ? lock_is_held_type+0xdb/0x130 [ 1745.800003] ? find_held_lock+0x2c/0x110 [ 1745.800300] ? lock_release+0x3b6/0x750 [ 1745.800598] ? sysfs_do_create_link_sd+0x82/0x140 [ 1745.800958] kernfs_new_node+0x97/0x120 [ 1745.801260] kernfs_create_link+0xcf/0x240 [ 1745.801566] sysfs_do_create_link_sd+0x90/0x140 [ 1745.801907] sysfs_create_link+0x63/0xc0 [ 1745.802210] device_add+0x676/0x1ec0 [ 1745.802489] ? __pfx_dev_set_name+0x10/0x10 [ 1745.802812] ? __pfx_device_add+0x10/0x10 [ 1745.803123] ? __init_waitqueue_head+0xca/0x150 [ 1745.803472] netdev_register_kobject+0x17e/0x3b0 [ 1745.803824] register_netdevice+0xd60/0x1530 [ 1745.804156] ? __pfx_register_netdevice+0x10/0x10 [ 1745.804532] ? dev_addr_mod+0x29e/0x350 [ 1745.804826] __tun_chr_ioctl+0x210b/0x3f80 [ 1745.805139] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1745.805473] ? __pfx___fget_files+0x10/0x10 [ 1745.805784] ? lock_acquire+0x32/0xc0 [ 1745.806080] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1745.806397] __x64_sys_ioctl+0x19e/0x210 [ 1745.806696] do_syscall_64+0x3f/0x90 [ 1745.806974] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1745.807348] RIP: 0033:0x7fcb82d36b19 [ 1745.807617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1745.808867] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1745.809409] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1745.809900] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1745.810399] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1745.810892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1745.811386] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1745.811894] [ 1745.835897] FAULT_INJECTION: forcing a failure. [ 1745.835897] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.838281] CPU: 0 PID: 9587 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1745.839387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1745.840531] Call Trace: [ 1745.840899] [ 1745.841229] dump_stack_lvl+0x8f/0xb7 [ 1745.841802] should_fail_ex.cold+0x5/0xa [ 1745.842393] ? __kernfs_new_node+0xd4/0x8c0 [ 1745.843015] should_failslab+0x9/0x20 [ 1745.843568] kmem_cache_alloc+0x5a/0x410 [ 1745.844158] __kernfs_new_node+0xd4/0x8c0 [ 1745.844767] ? lock_release+0x3b6/0x750 [ 1745.845338] ? __pfx___kernfs_new_node+0x10/0x10 [ 1745.846009] ? __pfx_lock_release+0x10/0x10 [ 1745.846618] ? lock_acquire+0x32/0xc0 [ 1745.847178] ? lock_is_held_type+0xdb/0x130 [ 1745.847788] ? find_held_lock+0x2c/0x110 [ 1745.848362] ? lock_release+0x3b6/0x750 [ 1745.848947] ? sysfs_do_create_link_sd+0x82/0x140 [ 1745.849632] kernfs_new_node+0x97/0x120 [ 1745.850215] kernfs_create_link+0xcf/0x240 [ 1745.850818] sysfs_do_create_link_sd+0x90/0x140 [ 1745.851483] sysfs_create_link+0x63/0xc0 [ 1745.852068] device_add+0x676/0x1ec0 [ 1745.852628] ? __pfx_dev_set_name+0x10/0x10 [ 1745.853266] ? __pfx_device_add+0x10/0x10 [ 1745.853880] ? __init_waitqueue_head+0xca/0x150 [ 1745.854577] netdev_register_kobject+0x17e/0x3b0 [ 1745.855274] register_netdevice+0xd60/0x1530 [ 1745.855935] ? __pfx_register_netdevice+0x10/0x10 [ 1745.856656] ? dev_addr_mod+0x29e/0x350 [ 1745.857239] __tun_chr_ioctl+0x210b/0x3f80 [ 1745.857864] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1745.858530] ? __pfx___fget_files+0x10/0x10 [ 1745.859150] ? lock_acquire+0x32/0xc0 [ 1745.859731] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1745.860357] __x64_sys_ioctl+0x19e/0x210 [ 1745.860954] do_syscall_64+0x3f/0x90 [ 1745.861506] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1745.862237] RIP: 0033:0x7ff461a5bb19 04:52:59 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 28) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1745.862763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1745.865342] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1745.866367] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1745.867327] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1745.868282] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1745.869247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1745.870203] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1745.871189] 04:52:59 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 41) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:59 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0f*TI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:52:59 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 36) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:52:59 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 35) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1746.037155] FAULT_INJECTION: forcing a failure. [ 1746.037155] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.038379] CPU: 1 PID: 9604 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1746.038937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1746.039497] Call Trace: [ 1746.039681] [ 1746.039848] dump_stack_lvl+0x8f/0xb7 [ 1746.040143] should_fail_ex.cold+0x5/0xa [ 1746.040458] ? __kernfs_new_node+0xd4/0x8c0 [ 1746.040776] should_failslab+0x9/0x20 [ 1746.041062] kmem_cache_alloc+0x5a/0x410 [ 1746.041363] __kernfs_new_node+0xd4/0x8c0 [ 1746.041664] ? kernfs_add_one+0x17a/0x4f0 [ 1746.041964] ? __pfx___kernfs_new_node+0x10/0x10 [ 1746.042316] ? lock_is_held_type+0xdb/0x130 [ 1746.042630] ? find_held_lock+0x2c/0x110 [ 1746.042927] ? lock_release+0x3b6/0x750 [ 1746.043216] ? sysfs_do_create_link_sd+0x82/0x140 [ 1746.043571] kernfs_new_node+0x97/0x120 [ 1746.043870] kernfs_create_link+0xcf/0x240 [ 1746.044174] sysfs_do_create_link_sd+0x90/0x140 [ 1746.044524] sysfs_create_link+0x63/0xc0 [ 1746.044822] device_add+0x552/0x1ec0 [ 1746.045104] ? __pfx_dev_set_name+0x10/0x10 [ 1746.045424] ? __pfx_device_add+0x10/0x10 [ 1746.045729] ? __init_waitqueue_head+0xca/0x150 [ 1746.046076] netdev_register_kobject+0x17e/0x3b0 [ 1746.046424] register_netdevice+0xd60/0x1530 [ 1746.046754] ? __pfx_register_netdevice+0x10/0x10 [ 1746.047113] ? dev_addr_mod+0x29e/0x350 [ 1746.047402] __tun_chr_ioctl+0x210b/0x3f80 [ 1746.047720] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1746.048051] ? __pfx___fget_files+0x10/0x10 [ 1746.048355] ? lock_acquire+0x32/0xc0 [ 1746.048658] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1746.048970] __x64_sys_ioctl+0x19e/0x210 [ 1746.049263] do_syscall_64+0x3f/0x90 [ 1746.049548] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1746.049921] RIP: 0033:0x7fcb82d36b19 [ 1746.050193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1746.051405] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1746.051913] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1746.052377] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1746.052863] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1746.053360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1746.053844] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1746.054362] [ 1746.129356] Invalid ELF header magic: != ELF [ 1746.138674] FAULT_INJECTION: forcing a failure. [ 1746.138674] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.139853] CPU: 1 PID: 9606 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1746.140415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1746.140999] Call Trace: [ 1746.141185] [ 1746.141353] dump_stack_lvl+0x8f/0xb7 [ 1746.141645] should_fail_ex.cold+0x5/0xa [ 1746.141942] ? __kernfs_new_node+0xd4/0x8c0 [ 1746.142257] should_failslab+0x9/0x20 [ 1746.142536] kmem_cache_alloc+0x5a/0x410 [ 1746.142834] ? __lock_acquire+0x164d/0x5e70 [ 1746.143155] __kernfs_new_node+0xd4/0x8c0 [ 1746.143459] ? __pfx___kernfs_new_node+0x10/0x10 [ 1746.143803] ? find_held_lock+0x2c/0x110 [ 1746.144100] ? lock_release+0x3b6/0x750 [ 1746.144385] ? __kernfs_new_node+0x2d7/0x8c0 [ 1746.144732] ? map_id_range_down+0x1c4/0x340 [ 1746.145059] kernfs_new_node+0x97/0x120 [ 1746.145355] __kernfs_create_file+0x55/0x350 [ 1746.145673] sysfs_add_file_mode_ns+0x21c/0x440 [ 1746.146012] ? __pfx_dev_attr_store+0x10/0x10 [ 1746.146350] internal_create_group+0x322/0xb20 [ 1746.146702] ? __pfx_internal_create_group+0x10/0x10 [ 1746.147072] ? kernfs_add_one+0x17a/0x4f0 [ 1746.147386] ? kernfs_create_link+0x1bb/0x240 [ 1746.147724] internal_create_groups.part.0+0x90/0x140 [ 1746.148101] sysfs_create_groups+0x29/0x50 [ 1746.148409] device_add+0x711/0x1ec0 [ 1746.148695] ? __pfx_dev_set_name+0x10/0x10 [ 1746.149009] ? __pfx_device_add+0x10/0x10 [ 1746.149308] ? __init_waitqueue_head+0xca/0x150 [ 1746.149658] netdev_register_kobject+0x17e/0x3b0 [ 1746.150005] register_netdevice+0xd60/0x1530 [ 1746.150335] ? __pfx_register_netdevice+0x10/0x10 [ 1746.150689] ? dev_addr_mod+0x29e/0x350 [ 1746.150978] __tun_chr_ioctl+0x210b/0x3f80 [ 1746.151289] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1746.151605] ? __pfx___fget_files+0x10/0x10 [ 1746.151919] ? lock_acquire+0x32/0xc0 [ 1746.152205] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1746.152545] __x64_sys_ioctl+0x19e/0x210 [ 1746.152843] do_syscall_64+0x3f/0x90 [ 1746.153119] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1746.153494] RIP: 0033:0x7ff461a5bb19 [ 1746.153763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1746.154984] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1746.155500] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1746.155991] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1746.156488] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1746.156974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1746.157463] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1746.157965] 04:53:11 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 42) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:11 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 37) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:11 executing program 7: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1}}}}, 0x21) 04:53:11 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x0, 0x1}}}}, 0x21) 04:53:11 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 29) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:11 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0f+TI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:53:11 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 36) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1758.059789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1758.076773] Invalid ELF header magic: != ELF 04:53:11 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, 0x0, 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) [ 1758.085549] FAULT_INJECTION: forcing a failure. [ 1758.085549] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.086544] CPU: 0 PID: 9624 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1758.087091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1758.087642] Call Trace: [ 1758.087832] [ 1758.087996] dump_stack_lvl+0x8f/0xb7 [ 1758.088284] should_fail_ex.cold+0x5/0xa [ 1758.088591] ? __kernfs_new_node+0xd4/0x8c0 [ 1758.088909] should_failslab+0x9/0x20 [ 1758.089201] kmem_cache_alloc+0x5a/0x410 [ 1758.089518] __kernfs_new_node+0xd4/0x8c0 [ 1758.089831] ? lock_release+0x3b6/0x750 [ 1758.090134] ? __pfx___kernfs_new_node+0x10/0x10 [ 1758.090481] ? __pfx_lock_release+0x10/0x10 [ 1758.090787] ? lock_acquire+0x32/0xc0 [ 1758.091063] ? up_write+0x1b0/0x520 [ 1758.091344] kernfs_new_node+0x97/0x120 [ 1758.091644] __kernfs_create_file+0x55/0x350 [ 1758.091962] sysfs_add_file_mode_ns+0x21c/0x440 [ 1758.092296] ? __pfx_dev_attr_store+0x10/0x10 [ 1758.092653] internal_create_group+0x322/0xb20 [ 1758.092987] ? __pfx_internal_create_group+0x10/0x10 [ 1758.093347] ? kernfs_add_one+0x17a/0x4f0 [ 1758.093652] ? kernfs_create_link+0x1bb/0x240 [ 1758.093975] internal_create_groups.part.0+0x90/0x140 [ 1758.094322] sysfs_create_groups+0x29/0x50 [ 1758.094647] device_add+0x711/0x1ec0 [ 1758.094933] ? __pfx_dev_set_name+0x10/0x10 [ 1758.095266] ? __pfx_device_add+0x10/0x10 [ 1758.095582] ? __init_waitqueue_head+0xca/0x150 [ 1758.095941] netdev_register_kobject+0x17e/0x3b0 [ 1758.096298] register_netdevice+0xd60/0x1530 [ 1758.096653] ? __pfx_register_netdevice+0x10/0x10 [ 1758.097016] ? dev_addr_mod+0x29e/0x350 [ 1758.097313] __tun_chr_ioctl+0x210b/0x3f80 [ 1758.097636] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1758.097941] ? __pfx___fget_files+0x10/0x10 [ 1758.098265] ? lock_acquire+0x32/0xc0 [ 1758.098570] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1758.098905] __x64_sys_ioctl+0x19e/0x210 [ 1758.099216] do_syscall_64+0x3f/0x90 [ 1758.099515] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1758.099906] RIP: 0033:0x7f2e2b599b19 [ 1758.100190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1758.101497] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1758.102045] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1758.102561] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1758.103073] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1758.103592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1758.104096] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1758.104627] [ 1758.120921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:53:11 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0f-TI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1758.154495] FAULT_INJECTION: forcing a failure. [ 1758.154495] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.155530] CPU: 0 PID: 9623 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1758.156085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1758.156650] Call Trace: [ 1758.156834] [ 1758.156999] dump_stack_lvl+0x8f/0xb7 [ 1758.157279] should_fail_ex.cold+0x5/0xa [ 1758.157572] ? kstrdup_const+0x57/0x80 [ 1758.157849] should_failslab+0x9/0x20 [ 1758.158124] __kmem_cache_alloc_node+0x5b/0x400 [ 1758.158462] ? kstrdup_const+0x57/0x80 [ 1758.158742] ? kstrdup_const+0x57/0x80 [ 1758.159020] __kmalloc_node_track_caller+0x43/0xb0 [ 1758.159375] kstrdup+0x3f/0x80 [ 1758.159608] kstrdup_const+0x57/0x80 [ 1758.159869] __kernfs_new_node+0x9d/0x8c0 [ 1758.160182] ? lock_release+0x3b6/0x750 [ 1758.160466] ? __pfx___kernfs_new_node+0x10/0x10 [ 1758.160817] ? __pfx_lock_release+0x10/0x10 [ 1758.161120] ? lock_acquire+0x32/0xc0 [ 1758.161403] ? lock_is_held_type+0xdb/0x130 [ 1758.161718] ? find_held_lock+0x2c/0x110 [ 1758.162003] ? lock_release+0x3b6/0x750 [ 1758.162296] ? sysfs_do_create_link_sd+0x82/0x140 [ 1758.162647] kernfs_new_node+0x97/0x120 [ 1758.162925] kernfs_create_link+0xcf/0x240 [ 1758.163223] sysfs_do_create_link_sd+0x90/0x140 [ 1758.163573] sysfs_create_link+0x63/0xc0 [ 1758.163878] device_add+0x676/0x1ec0 [ 1758.164162] ? __pfx_dev_set_name+0x10/0x10 [ 1758.164492] ? __pfx_device_add+0x10/0x10 [ 1758.164778] ? __init_waitqueue_head+0xca/0x150 [ 1758.165133] netdev_register_kobject+0x17e/0x3b0 [ 1758.165495] register_netdevice+0xd60/0x1530 [ 1758.165840] ? __pfx_register_netdevice+0x10/0x10 [ 1758.166202] ? dev_addr_mod+0x29e/0x350 [ 1758.166505] __tun_chr_ioctl+0x210b/0x3f80 [ 1758.166792] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1758.167136] ? __pfx___fget_files+0x10/0x10 [ 1758.167418] ? lock_acquire+0x32/0xc0 [ 1758.167724] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1758.168019] __x64_sys_ioctl+0x19e/0x210 [ 1758.168339] do_syscall_64+0x3f/0x90 [ 1758.168607] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1758.168990] RIP: 0033:0x7fcb82d36b19 [ 1758.169237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1758.170521] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1758.171004] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1758.171518] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1758.172030] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1758.172538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1758.173071] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1758.173598] [ 1758.202766] Invalid ELF header magic: != ELF 04:53:11 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 37) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:11 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 38) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:23 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 38) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:23 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0f.TI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:53:23 executing program 7: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_submit(0x0, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r4 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:53:23 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 30) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:23 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 43) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:23 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640)}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:53:23 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 39) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:23 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r4 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) [ 1770.632484] Invalid ELF header magic: != ELF [ 1770.644647] FAULT_INJECTION: forcing a failure. [ 1770.644647] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.646134] CPU: 0 PID: 9652 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1770.646679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.647232] Call Trace: [ 1770.647412] [ 1770.647573] dump_stack_lvl+0x8f/0xb7 [ 1770.647868] should_fail_ex.cold+0x5/0xa [ 1770.648162] ? kstrdup_const+0x57/0x80 [ 1770.648438] should_failslab+0x9/0x20 [ 1770.648709] __kmem_cache_alloc_node+0x5b/0x400 [ 1770.649044] ? kstrdup_const+0x57/0x80 [ 1770.649326] ? kstrdup_const+0x57/0x80 [ 1770.649602] __kmalloc_node_track_caller+0x43/0xb0 [ 1770.649950] kstrdup+0x3f/0x80 [ 1770.650187] kstrdup_const+0x57/0x80 [ 1770.650441] __kernfs_new_node+0x9d/0x8c0 [ 1770.650749] ? lock_release+0x3b6/0x750 [ 1770.651053] ? __pfx___kernfs_new_node+0x10/0x10 [ 1770.651390] ? __pfx_lock_release+0x10/0x10 [ 1770.651692] ? lock_acquire+0x32/0xc0 [ 1770.651974] ? lock_is_held_type+0xdb/0x130 [ 1770.652281] ? find_held_lock+0x2c/0x110 [ 1770.652571] ? lock_release+0x3b6/0x750 [ 1770.652859] ? sysfs_do_create_link_sd+0x82/0x140 [ 1770.653206] kernfs_new_node+0x97/0x120 [ 1770.653480] kernfs_create_link+0xcf/0x240 [ 1770.653789] sysfs_do_create_link_sd+0x90/0x140 [ 1770.654145] sysfs_create_link+0x63/0xc0 [ 1770.654455] device_add+0x676/0x1ec0 [ 1770.654751] ? __pfx_dev_set_name+0x10/0x10 [ 1770.655086] ? __pfx_device_add+0x10/0x10 [ 1770.655408] ? __init_waitqueue_head+0xca/0x150 [ 1770.655763] netdev_register_kobject+0x17e/0x3b0 [ 1770.656129] register_netdevice+0xd60/0x1530 [ 1770.656474] ? __pfx_register_netdevice+0x10/0x10 [ 1770.656861] ? dev_addr_mod+0x29e/0x350 [ 1770.657169] __tun_chr_ioctl+0x210b/0x3f80 [ 1770.657492] ? lock_is_held_type+0xdb/0x130 [ 1770.657821] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1770.658175] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1770.658593] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1770.659004] ? lockdep_hardirqs_on+0x7d/0x100 [ 1770.659357] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1770.659690] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1770.660015] __x64_sys_ioctl+0x19e/0x210 [ 1770.660293] do_syscall_64+0x3f/0x90 [ 1770.660580] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1770.660935] RIP: 0033:0x7fcb82d36b19 [ 1770.661221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.662340] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1770.662829] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1770.663288] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1770.663752] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.664215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.664666] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1770.665152] [ 1770.699247] FAULT_INJECTION: forcing a failure. [ 1770.699247] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.700379] CPU: 0 PID: 9662 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1770.700891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.701400] Call Trace: [ 1770.701568] [ 1770.701720] dump_stack_lvl+0x8f/0xb7 [ 1770.701979] should_fail_ex.cold+0x5/0xa [ 1770.702247] ? __kernfs_new_node+0xd4/0x8c0 [ 1770.702529] should_failslab+0x9/0x20 [ 1770.702780] kmem_cache_alloc+0x5a/0x410 [ 1770.703052] __kernfs_new_node+0xd4/0x8c0 [ 1770.703328] ? lock_release+0x3b6/0x750 [ 1770.703590] ? __pfx___kernfs_new_node+0x10/0x10 [ 1770.703900] ? __pfx_lock_release+0x10/0x10 [ 1770.704183] ? lock_acquire+0x32/0xc0 [ 1770.704450] ? up_write+0x1b0/0x520 [ 1770.704707] kernfs_new_node+0x97/0x120 [ 1770.704996] __kernfs_create_file+0x55/0x350 [ 1770.705285] sysfs_add_file_mode_ns+0x21c/0x440 [ 1770.705591] ? __pfx_dev_attr_store+0x10/0x10 [ 1770.705892] internal_create_group+0x322/0xb20 [ 1770.706207] ? __pfx_internal_create_group+0x10/0x10 [ 1770.706543] ? kernfs_add_one+0x17a/0x4f0 [ 1770.706824] ? kernfs_create_link+0x1bb/0x240 [ 1770.707121] internal_create_groups.part.0+0x90/0x140 [ 1770.707458] sysfs_create_groups+0x29/0x50 [ 1770.707738] device_add+0x711/0x1ec0 [ 1770.707991] ? __pfx_dev_set_name+0x10/0x10 [ 1770.708272] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 1770.708618] ? __pfx_device_add+0x10/0x10 [ 1770.708901] ? __init_waitqueue_head+0xca/0x150 [ 1770.709215] netdev_register_kobject+0x17e/0x3b0 [ 1770.709529] register_netdevice+0xd60/0x1530 [ 1770.709826] ? __pfx_register_netdevice+0x10/0x10 [ 1770.710141] ? dev_addr_mod+0x29e/0x350 [ 1770.710404] __tun_chr_ioctl+0x210b/0x3f80 [ 1770.710689] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1770.710994] ? __pfx___fget_files+0x10/0x10 [ 1770.711276] ? lock_acquire+0x32/0xc0 [ 1770.711544] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1770.711833] __x64_sys_ioctl+0x19e/0x210 [ 1770.712106] do_syscall_64+0x3f/0x90 [ 1770.712361] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1770.712695] RIP: 0033:0x7f2e2b599b19 [ 1770.712953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.714043] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1770.714513] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1770.714954] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1770.715392] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.715829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.716264] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1770.716719] 04:53:23 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0f0TI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1770.770425] FAULT_INJECTION: forcing a failure. [ 1770.770425] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.771350] CPU: 0 PID: 9661 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1770.771896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.772466] Call Trace: [ 1770.772648] [ 1770.772838] dump_stack_lvl+0x8f/0xb7 [ 1770.773127] should_fail_ex.cold+0x5/0xa [ 1770.773416] ? __kernfs_new_node+0xd4/0x8c0 [ 1770.773731] should_failslab+0x9/0x20 [ 1770.774010] kmem_cache_alloc+0x5a/0x410 [ 1770.774300] __kernfs_new_node+0xd4/0x8c0 [ 1770.774598] ? lock_release+0x3b6/0x750 [ 1770.774881] ? __pfx___kernfs_new_node+0x10/0x10 [ 1770.775221] ? __pfx_lock_release+0x10/0x10 [ 1770.775527] ? lock_acquire+0x32/0xc0 [ 1770.775807] ? up_write+0x1b0/0x520 [ 1770.776087] kernfs_new_node+0x97/0x120 [ 1770.776391] __kernfs_create_file+0x55/0x350 [ 1770.776697] sysfs_add_file_mode_ns+0x21c/0x440 [ 1770.777033] ? __pfx_dev_attr_store+0x10/0x10 [ 1770.777355] internal_create_group+0x322/0xb20 [ 1770.777693] ? __pfx_internal_create_group+0x10/0x10 [ 1770.778049] ? kernfs_add_one+0x17a/0x4f0 [ 1770.778358] ? kernfs_create_link+0x1bb/0x240 [ 1770.778683] internal_create_groups.part.0+0x90/0x140 [ 1770.779051] sysfs_create_groups+0x29/0x50 [ 1770.779364] device_add+0x711/0x1ec0 [ 1770.779641] ? __pfx_dev_set_name+0x10/0x10 [ 1770.779941] ? __pfx_device_add+0x10/0x10 [ 1770.780221] ? __init_waitqueue_head+0xca/0x150 [ 1770.780534] netdev_register_kobject+0x17e/0x3b0 [ 1770.780864] register_netdevice+0xd60/0x1530 [ 1770.781164] ? __pfx_register_netdevice+0x10/0x10 [ 1770.781486] ? dev_addr_mod+0x29e/0x350 [ 1770.781754] __tun_chr_ioctl+0x210b/0x3f80 [ 1770.782070] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1770.782383] ? __pfx___fget_files+0x10/0x10 [ 1770.782667] ? lock_acquire+0x32/0xc0 [ 1770.782938] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1770.783233] __x64_sys_ioctl+0x19e/0x210 [ 1770.783504] do_syscall_64+0x3f/0x90 [ 1770.783761] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1770.784094] RIP: 0033:0x7ff461a5bb19 [ 1770.784339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.785458] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1770.785934] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1770.786373] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1770.786812] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.787264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.787704] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1770.788198] 04:53:24 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 39) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1770.919412] Invalid ELF header magic: != ELF 04:53:24 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 44) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:24 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 40) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:24 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\n\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:53:24 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640)}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:53:24 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 31) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:24 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fXTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1771.043893] Invalid ELF header magic: != ELF 04:53:24 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640)}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:53:24 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 40) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:24 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x17\n\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1771.196826] Invalid ELF header magic: != ELF [ 1771.225778] Invalid ELF header magic: != ELF 04:53:24 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 41) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:24 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x17\n\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1771.329257] FAULT_INJECTION: forcing a failure. [ 1771.329257] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.330165] CPU: 0 PID: 9687 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1771.330670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1771.331184] Call Trace: [ 1771.331365] [ 1771.331521] dump_stack_lvl+0x8f/0xb7 [ 1771.331794] should_fail_ex.cold+0x5/0xa [ 1771.332068] ? __kernfs_new_node+0xd4/0x8c0 [ 1771.332359] should_failslab+0x9/0x20 [ 1771.332614] kmem_cache_alloc+0x5a/0x410 [ 1771.332907] __kernfs_new_node+0xd4/0x8c0 [ 1771.333187] ? lock_release+0x3b6/0x750 [ 1771.333452] ? __pfx___kernfs_new_node+0x10/0x10 [ 1771.333761] ? __pfx_lock_release+0x10/0x10 [ 1771.334044] ? lock_acquire+0x32/0xc0 [ 1771.334331] ? up_write+0x1b0/0x520 [ 1771.334590] kernfs_new_node+0x97/0x120 [ 1771.334864] __kernfs_create_file+0x55/0x350 [ 1771.335156] sysfs_add_file_mode_ns+0x21c/0x440 [ 1771.335467] ? __pfx_dev_attr_store+0x10/0x10 [ 1771.335772] internal_create_group+0x322/0xb20 [ 1771.336079] ? __pfx_internal_create_group+0x10/0x10 [ 1771.336408] ? kernfs_add_one+0x17a/0x4f0 [ 1771.336692] ? kernfs_create_link+0x1bb/0x240 [ 1771.336994] internal_create_groups.part.0+0x90/0x140 [ 1771.337332] sysfs_create_groups+0x29/0x50 [ 1771.337610] device_add+0x711/0x1ec0 [ 1771.337871] ? __pfx_dev_set_name+0x10/0x10 [ 1771.338161] ? __pfx_device_add+0x10/0x10 [ 1771.338458] ? __init_waitqueue_head+0xca/0x150 [ 1771.338783] netdev_register_kobject+0x17e/0x3b0 [ 1771.339125] register_netdevice+0xd60/0x1530 [ 1771.339436] ? __pfx_register_netdevice+0x10/0x10 [ 1771.339755] ? dev_addr_mod+0x29e/0x350 [ 1771.340042] __tun_chr_ioctl+0x210b/0x3f80 [ 1771.340329] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1771.340649] ? __pfx___fget_files+0x10/0x10 [ 1771.340951] ? lock_acquire+0x32/0xc0 [ 1771.341222] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1771.341515] __x64_sys_ioctl+0x19e/0x210 [ 1771.341787] do_syscall_64+0x3f/0x90 [ 1771.342041] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1771.342389] RIP: 0033:0x7f2e2b599b19 [ 1771.342629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1771.343732] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1771.344247] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1771.344702] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1771.345151] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1771.345590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1771.346034] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1771.346489] [ 1771.437115] Invalid ELF header magic: != ELF [ 1771.444825] Invalid ELF header magic: != ELF 04:53:40 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 42) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:40 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 41) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:40 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640)}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:53:40 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fcTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:53:40 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 45) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:40 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x17\n\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:53:40 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 32) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:40 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1786.803637] Invalid ELF header magic: != ELF [ 1786.822632] Invalid ELF header magic: != ELF 04:53:40 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1786.877472] FAULT_INJECTION: forcing a failure. [ 1786.877472] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.878414] CPU: 0 PID: 9723 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1786.878922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1786.879425] Call Trace: [ 1786.879597] [ 1786.879750] dump_stack_lvl+0x8f/0xb7 [ 1786.880029] should_fail_ex.cold+0x5/0xa [ 1786.880315] ? kstrdup_const+0x57/0x80 [ 1786.880579] should_failslab+0x9/0x20 [ 1786.880838] __kmem_cache_alloc_node+0x5b/0x400 [ 1786.881151] ? kstrdup_const+0x57/0x80 [ 1786.881421] ? kstrdup_const+0x57/0x80 [ 1786.881690] __kmalloc_node_track_caller+0x43/0xb0 [ 1786.882027] kstrdup+0x3f/0x80 [ 1786.882245] kstrdup_const+0x57/0x80 [ 1786.882513] __kernfs_new_node+0x9d/0x8c0 [ 1786.882797] ? lock_release+0x3b6/0x750 [ 1786.883064] ? __pfx___kernfs_new_node+0x10/0x10 [ 1786.883374] ? __pfx_lock_release+0x10/0x10 [ 1786.883656] ? lock_acquire+0x32/0xc0 [ 1786.883915] ? lock_is_held_type+0xdb/0x130 [ 1786.884208] ? find_held_lock+0x2c/0x110 [ 1786.884479] ? lock_release+0x3b6/0x750 [ 1786.884742] ? sysfs_do_create_link_sd+0x82/0x140 [ 1786.885071] kernfs_new_node+0x97/0x120 [ 1786.885347] kernfs_create_link+0xcf/0x240 [ 1786.885625] sysfs_do_create_link_sd+0x90/0x140 [ 1786.885932] sysfs_create_link+0x63/0xc0 [ 1786.886202] device_add+0x676/0x1ec0 [ 1786.886452] ? __pfx_dev_set_name+0x10/0x10 [ 1786.886745] ? __pfx_device_add+0x10/0x10 [ 1786.887022] ? __init_waitqueue_head+0xca/0x150 [ 1786.887359] netdev_register_kobject+0x17e/0x3b0 [ 1786.887688] register_netdevice+0xd60/0x1530 [ 1786.888009] ? __pfx_register_netdevice+0x10/0x10 [ 1786.888332] ? dev_addr_mod+0x29e/0x350 [ 1786.888619] __tun_chr_ioctl+0x210b/0x3f80 [ 1786.888908] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1786.889243] ? __pfx___fget_files+0x10/0x10 [ 1786.889528] ? lock_acquire+0x32/0xc0 [ 1786.889802] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1786.890093] __x64_sys_ioctl+0x19e/0x210 [ 1786.890365] do_syscall_64+0x3f/0x90 [ 1786.890620] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1786.890963] RIP: 0033:0x7f59fcc15b19 [ 1786.891206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1786.892306] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1786.892782] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1786.893237] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1786.893680] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1786.894118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1786.894551] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1786.895015] 04:53:40 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fdTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1787.032646] Invalid ELF header magic: != ELF 04:53:40 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 43) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1787.086554] Invalid ELF header magic: != ELF 04:53:56 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 04:53:56 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 44) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:56 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0x0) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:53:56 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 46) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:56 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 33) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:56 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000000000)=ANY=[@ANYBLOB="d0000000080211000000080211000001505050e800505050cfa4acbb6b7de07f8d5ffc0000030000000001ed"], 0x21) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1f}, @broadcast, @broadcast, @random="ba804c5cd705", {0x3, 0x714}}, @ver_80211n={0x0, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @sa_query_req={0x8, 0x0, 0xffff}}, 0x20) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=@ctrl_frame=@ba={{}, {0x4}, @device_b, @broadcast, @compressed={{0x1, 0x0, 0x1, 0x0, 0x7}, {0x0, 0x3}, "6de1cc9b31c731dc"}}, 0x1c) 04:53:56 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 42) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:56 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fiTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1803.067469] Invalid ELF header magic: != ELF [ 1803.075874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.098080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.112548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:53:56 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 04:53:56 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0flTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1803.315631] FAULT_INJECTION: forcing a failure. [ 1803.315631] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.317742] CPU: 0 PID: 9762 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1803.318728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1803.319719] Call Trace: [ 1803.320059] [ 1803.320359] dump_stack_lvl+0x8f/0xb7 [ 1803.320876] should_fail_ex.cold+0x5/0xa [ 1803.321438] ? __kernfs_new_node+0xd4/0x8c0 [ 1803.322045] should_failslab+0x9/0x20 [ 1803.322651] kmem_cache_alloc+0x5a/0x410 [ 1803.323210] __kernfs_new_node+0xd4/0x8c0 [ 1803.323882] ? lock_release+0x3b6/0x750 [ 1803.324487] ? __pfx___kernfs_new_node+0x10/0x10 [ 1803.325239] ? __pfx_lock_release+0x10/0x10 [ 1803.325854] ? lock_acquire+0x32/0xc0 [ 1803.326387] ? up_write+0x1b0/0x520 [ 1803.326895] kernfs_new_node+0x97/0x120 [ 1803.327431] __kernfs_create_file+0x55/0x350 [ 1803.328033] sysfs_add_file_mode_ns+0x21c/0x440 [ 1803.328655] ? __pfx_dev_attr_store+0x10/0x10 [ 1803.329292] internal_create_group+0x322/0xb20 [ 1803.329916] ? __pfx_internal_create_group+0x10/0x10 [ 1803.330608] ? kernfs_add_one+0x17a/0x4f0 [ 1803.331170] ? kernfs_create_link+0x1bb/0x240 [ 1803.331764] internal_create_groups.part.0+0x90/0x140 [ 1803.332473] sysfs_create_groups+0x29/0x50 [ 1803.333020] device_add+0x711/0x1ec0 [ 1803.333542] ? __pfx_dev_set_name+0x10/0x10 [ 1803.334114] ? __pfx_device_add+0x10/0x10 [ 1803.334639] ? __init_waitqueue_head+0xca/0x150 [ 1803.335269] netdev_register_kobject+0x17e/0x3b0 [ 1803.335864] register_netdevice+0xd60/0x1530 [ 1803.336467] ? __pfx_register_netdevice+0x10/0x10 [ 1803.337067] ? dev_addr_mod+0x29e/0x350 [ 1803.337588] __tun_chr_ioctl+0x210b/0x3f80 [ 1803.338152] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1803.338748] ? __pfx___fget_files+0x10/0x10 [ 1803.339305] ? lock_acquire+0x32/0xc0 [ 1803.339832] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1803.340405] __x64_sys_ioctl+0x19e/0x210 [ 1803.340940] do_syscall_64+0x3f/0x90 [ 1803.341460] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1803.342139] RIP: 0033:0x7ff461a5bb19 [ 1803.342612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1803.344793] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1803.345735] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1803.346607] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1803.347481] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1803.348355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1803.349250] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1803.350153] [ 1803.352726] Invalid ELF header magic: != ELF [ 1803.364401] FAULT_INJECTION: forcing a failure. [ 1803.364401] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.366266] CPU: 1 PID: 9765 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1803.367273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1803.368279] Call Trace: [ 1803.368610] [ 1803.368908] dump_stack_lvl+0x8f/0xb7 [ 1803.369440] should_fail_ex.cold+0x5/0xa [ 1803.369971] ? __kernfs_new_node+0xd4/0x8c0 [ 1803.370536] should_failslab+0x9/0x20 [ 1803.371033] kmem_cache_alloc+0x5a/0x410 [ 1803.371566] __kernfs_new_node+0xd4/0x8c0 [ 1803.372108] ? lock_release+0x3b6/0x750 [ 1803.372623] ? __pfx___kernfs_new_node+0x10/0x10 [ 1803.373253] ? __pfx_lock_release+0x10/0x10 [ 1803.373847] ? lock_acquire+0x32/0xc0 [ 1803.374437] ? up_write+0x1b0/0x520 [ 1803.374995] kernfs_new_node+0x97/0x120 [ 1803.375610] __kernfs_create_file+0x55/0x350 [ 1803.376264] sysfs_add_file_mode_ns+0x21c/0x440 [ 1803.376932] ? __pfx_dev_attr_store+0x10/0x10 [ 1803.377590] internal_create_group+0x322/0xb20 [ 1803.378253] ? __pfx_internal_create_group+0x10/0x10 [ 1803.378993] ? kernfs_add_one+0x17a/0x4f0 [ 1803.379607] ? kernfs_create_link+0x1bb/0x240 [ 1803.380245] internal_create_groups.part.0+0x90/0x140 [ 1803.380980] sysfs_create_groups+0x29/0x50 [ 1803.381603] device_add+0x711/0x1ec0 [ 1803.382095] ? __pfx_dev_set_name+0x10/0x10 [ 1803.382665] ? __pfx_device_add+0x10/0x10 [ 1803.383204] ? __init_waitqueue_head+0xca/0x150 [ 1803.383826] netdev_register_kobject+0x17e/0x3b0 [ 1803.384456] register_netdevice+0xd60/0x1530 [ 1803.385041] ? __pfx_register_netdevice+0x10/0x10 [ 1803.385687] ? dev_addr_mod+0x29e/0x350 [ 1803.386205] __tun_chr_ioctl+0x210b/0x3f80 [ 1803.386773] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1803.387373] ? __pfx___fget_files+0x10/0x10 [ 1803.387929] ? lock_acquire+0x32/0xc0 [ 1803.388456] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1803.389036] __x64_sys_ioctl+0x19e/0x210 [ 1803.389598] do_syscall_64+0x3f/0x90 [ 1803.390096] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1803.390769] RIP: 0033:0x7f2e2b599b19 [ 1803.391241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1803.393419] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1803.394364] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1803.395231] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1803.396104] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1803.396969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1803.397855] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1803.398756] [ 1803.416289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.422166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:53:56 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_b, @device_b}, @addba_req={0x3, 0x0, {0x1, {0x1, 0x1, 0x5, 0x3fd}, 0x4, {0x3, 0x3}}}}, 0x21) [ 1803.482824] Invalid ELF header magic: != ELF 04:53:56 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) 04:53:56 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 43) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:56 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0x0) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:53:56 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 47) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:56 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 45) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:56 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0foTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1803.593252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:53:56 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 34) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1803.752488] Invalid ELF header magic: != ELF 04:53:57 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) [ 1803.912292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.983406] FAULT_INJECTION: forcing a failure. [ 1803.983406] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.985700] CPU: 1 PID: 9790 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1803.986794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1803.987854] Call Trace: [ 1803.988207] [ 1803.988532] dump_stack_lvl+0x8f/0xb7 [ 1803.989091] should_fail_ex.cold+0x5/0xa [ 1803.989674] ? __kernfs_new_node+0xd4/0x8c0 [ 1803.990277] should_failslab+0x9/0x20 [ 1803.990818] kmem_cache_alloc+0x5a/0x410 [ 1803.991392] __kernfs_new_node+0xd4/0x8c0 [ 1803.991975] ? lock_release+0x3b6/0x750 [ 1803.992543] ? __pfx___kernfs_new_node+0x10/0x10 [ 1803.993205] ? __pfx_lock_release+0x10/0x10 [ 1803.993805] ? lock_acquire+0x32/0xc0 [ 1803.994366] ? up_write+0x1b0/0x520 [ 1803.994908] kernfs_new_node+0x97/0x120 [ 1803.995510] __kernfs_create_file+0x55/0x350 [ 1803.996129] sysfs_add_file_mode_ns+0x21c/0x440 [ 1803.996780] ? __pfx_dev_attr_store+0x10/0x10 [ 1803.997462] internal_create_group+0x322/0xb20 [ 1803.998126] ? __pfx_internal_create_group+0x10/0x10 [ 1803.998839] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1803.999604] internal_create_groups.part.0+0x90/0x140 [ 1804.000345] sysfs_create_groups+0x29/0x50 [ 1804.000948] device_add+0x711/0x1ec0 [ 1804.001518] ? __pfx_dev_set_name+0x10/0x10 [ 1804.002149] ? __pfx_device_add+0x10/0x10 [ 1804.002724] ? __init_waitqueue_head+0xca/0x150 [ 1804.003404] netdev_register_kobject+0x17e/0x3b0 [ 1804.004076] register_netdevice+0xd60/0x1530 [ 1804.004705] ? __pfx_register_netdevice+0x10/0x10 [ 1804.005404] ? dev_addr_mod+0x29e/0x350 [ 1804.005967] __tun_chr_ioctl+0x210b/0x3f80 [ 1804.006560] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1804.007193] ? __pfx___fget_files+0x10/0x10 [ 1804.007794] ? lock_acquire+0x32/0xc0 [ 1804.008363] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1804.008980] __x64_sys_ioctl+0x19e/0x210 [ 1804.009555] do_syscall_64+0x3f/0x90 [ 1804.010102] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1804.010820] RIP: 0033:0x7ff461a5bb19 [ 1804.011337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1804.013691] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1804.014700] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1804.015636] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1804.016569] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1804.017540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1804.018482] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1804.019468] [ 1804.083577] FAULT_INJECTION: forcing a failure. [ 1804.083577] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.085520] CPU: 0 PID: 9795 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1804.086403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1804.087277] Call Trace: [ 1804.087571] [ 1804.087834] dump_stack_lvl+0x8f/0xb7 [ 1804.088329] should_fail_ex.cold+0x5/0xa [ 1804.088801] ? __kernfs_new_node+0xd4/0x8c0 [ 1804.089304] should_failslab+0x9/0x20 [ 1804.089751] kmem_cache_alloc+0x5a/0x410 [ 1804.090225] __kernfs_new_node+0xd4/0x8c0 [ 1804.090702] ? lock_release+0x3b6/0x750 [ 1804.091164] ? __pfx___kernfs_new_node+0x10/0x10 [ 1804.091700] ? __pfx_lock_release+0x10/0x10 [ 1804.092180] ? lock_acquire+0x32/0xc0 [ 1804.092638] ? up_write+0x1b0/0x520 [ 1804.093082] kernfs_new_node+0x97/0x120 [ 1804.093573] __kernfs_create_file+0x55/0x350 [ 1804.094081] sysfs_add_file_mode_ns+0x21c/0x440 [ 1804.094608] ? __pfx_dev_attr_store+0x10/0x10 [ 1804.095132] internal_create_group+0x322/0xb20 [ 1804.095659] ? __pfx_internal_create_group+0x10/0x10 [ 1804.096228] ? kernfs_add_one+0x17a/0x4f0 [ 1804.096713] ? kernfs_create_link+0x1bb/0x240 [ 1804.097246] internal_create_groups.part.0+0x90/0x140 [ 1804.097830] sysfs_create_groups+0x29/0x50 [ 1804.098311] device_add+0x711/0x1ec0 [ 1804.098747] ? __pfx_dev_set_name+0x10/0x10 [ 1804.099247] ? __pfx_device_add+0x10/0x10 [ 1804.099718] ? __init_waitqueue_head+0xca/0x150 [ 1804.100258] netdev_register_kobject+0x17e/0x3b0 [ 1804.100807] register_netdevice+0xd60/0x1530 [ 1804.101337] ? __pfx_register_netdevice+0x10/0x10 [ 1804.101887] ? dev_addr_mod+0x29e/0x350 [ 1804.102340] __tun_chr_ioctl+0x210b/0x3f80 [ 1804.102826] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1804.103343] ? __pfx___fget_files+0x10/0x10 [ 1804.103823] ? lock_acquire+0x32/0xc0 [ 1804.104282] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1804.104782] __x64_sys_ioctl+0x19e/0x210 [ 1804.105263] do_syscall_64+0x3f/0x90 [ 1804.105699] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1804.106275] RIP: 0033:0x7f2e2b599b19 [ 1804.106690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1804.108559] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1804.109378] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1804.110132] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1804.110880] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1804.111625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1804.112377] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1804.113175] [ 1804.133502] Invalid ELF header magic: != ELF [ 1804.147283] FAULT_INJECTION: forcing a failure. [ 1804.147283] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.149137] CPU: 0 PID: 9798 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1804.150007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1804.150852] Call Trace: [ 1804.151136] [ 1804.151390] dump_stack_lvl+0x8f/0xb7 [ 1804.151833] should_fail_ex.cold+0x5/0xa [ 1804.152286] ? __kernfs_new_node+0xd4/0x8c0 [ 1804.152766] should_failslab+0x9/0x20 [ 1804.153198] kmem_cache_alloc+0x5a/0x410 [ 1804.153660] __kernfs_new_node+0xd4/0x8c0 [ 1804.154126] ? lock_release+0x3b6/0x750 [ 1804.154570] ? __pfx___kernfs_new_node+0x10/0x10 [ 1804.155096] ? __pfx_lock_release+0x10/0x10 [ 1804.155563] ? lock_acquire+0x32/0xc0 [ 1804.155998] ? lock_is_held_type+0xdb/0x130 [ 1804.156476] ? find_held_lock+0x2c/0x110 [ 1804.156925] ? lock_release+0x3b6/0x750 [ 1804.157379] ? sysfs_do_create_link_sd+0x82/0x140 [ 1804.157918] kernfs_new_node+0x97/0x120 [ 1804.158377] kernfs_create_link+0xcf/0x240 [ 1804.158839] sysfs_do_create_link_sd+0x90/0x140 [ 1804.159354] sysfs_create_link+0x63/0xc0 [ 1804.159810] device_add+0x676/0x1ec0 [ 1804.160233] ? __pfx_dev_set_name+0x10/0x10 [ 1804.160719] ? __pfx_device_add+0x10/0x10 [ 1804.161202] ? __init_waitqueue_head+0xca/0x150 [ 1804.161731] netdev_register_kobject+0x17e/0x3b0 [ 1804.162265] register_netdevice+0xd60/0x1530 [ 1804.162766] ? __pfx_register_netdevice+0x10/0x10 [ 1804.163300] ? dev_addr_mod+0x29e/0x350 [ 1804.163740] __tun_chr_ioctl+0x210b/0x3f80 [ 1804.164218] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1804.164722] ? __pfx___fget_files+0x10/0x10 [ 1804.165212] ? lock_acquire+0x32/0xc0 [ 1804.165663] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1804.166152] __x64_sys_ioctl+0x19e/0x210 [ 1804.166606] do_syscall_64+0x3f/0x90 [ 1804.167032] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1804.167596] RIP: 0033:0x7f59fcc15b19 [ 1804.167999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1804.169848] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1804.170633] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1804.171365] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1804.172097] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1804.172828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1804.173568] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1804.174326] 04:53:57 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 44) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:57 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) 04:53:57 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 46) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:53:57 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fpTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1804.379674] FAULT_INJECTION: forcing a failure. [ 1804.379674] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.381386] CPU: 0 PID: 9813 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1804.382191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1804.382996] Call Trace: [ 1804.383259] [ 1804.383498] dump_stack_lvl+0x8f/0xb7 [ 1804.383928] should_fail_ex.cold+0x5/0xa [ 1804.384360] ? __kernfs_new_node+0xd4/0x8c0 [ 1804.384809] should_failslab+0x9/0x20 [ 1804.385225] kmem_cache_alloc+0x5a/0x410 [ 1804.385659] __kernfs_new_node+0xd4/0x8c0 [ 1804.386094] ? lock_release+0x3b6/0x750 [ 1804.386513] ? __pfx___kernfs_new_node+0x10/0x10 [ 1804.387013] ? __pfx_lock_release+0x10/0x10 [ 1804.387452] ? lock_acquire+0x32/0xc0 [ 1804.387836] ? up_write+0x1b0/0x520 [ 1804.388247] kernfs_new_node+0x97/0x120 [ 1804.388676] __kernfs_create_file+0x55/0x350 [ 1804.389143] sysfs_add_file_mode_ns+0x21c/0x440 [ 1804.389598] ? __pfx_dev_attr_store+0x10/0x10 [ 1804.390074] internal_create_group+0x322/0xb20 [ 1804.390520] ? __pfx_internal_create_group+0x10/0x10 [ 1804.390995] ? kernfs_add_one+0x17a/0x4f0 [ 1804.391403] ? kernfs_create_link+0x1bb/0x240 [ 1804.391838] internal_create_groups.part.0+0x90/0x140 [ 1804.392324] sysfs_create_groups+0x29/0x50 [ 1804.392767] device_add+0x711/0x1ec0 [ 1804.393177] ? __pfx_dev_set_name+0x10/0x10 [ 1804.393631] ? __pfx_device_add+0x10/0x10 [ 1804.394064] ? __init_waitqueue_head+0xca/0x150 [ 1804.394562] netdev_register_kobject+0x17e/0x3b0 [ 1804.395064] register_netdevice+0xd60/0x1530 [ 1804.395538] ? __pfx_register_netdevice+0x10/0x10 [ 1804.396048] ? dev_addr_mod+0x29e/0x350 [ 1804.396462] __tun_chr_ioctl+0x210b/0x3f80 [ 1804.396868] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1804.397349] ? __pfx___fget_files+0x10/0x10 [ 1804.397787] ? lock_acquire+0x32/0xc0 [ 1804.398207] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1804.398681] __x64_sys_ioctl+0x19e/0x210 [ 1804.399102] do_syscall_64+0x3f/0x90 [ 1804.399495] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1804.400031] RIP: 0033:0x7fcb82d36b19 [ 1804.400401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1804.402141] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1804.402897] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1804.403594] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1804.404285] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1804.404993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1804.405704] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1804.406424] [ 1804.440054] Invalid ELF header magic: != ELF 04:54:10 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0x0) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:54:10 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fuTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:54:10 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 47) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:10 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 48) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:10 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 35) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:10 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 04:54:10 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 45) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:10 executing program 3: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000500)={0x0, r0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000380)={0x0, r0, "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", "449637c14fbbed8e10b86bb3a0020088f4c4afaf11f213f18342facf10920af128f85f6e26314f4b660953f3910cc88821597331af171cda993566aa4e97c842d753e1d585cf66e5aa09764e8991054e56dd8c6927b105535066653fe791ad2f628696f485a53705ef8494cfe355938aa0053598fd90e2c46fe7097c3e991fa4cba2c622e025e27dddbad3cc2c3cd0c635ecdb30e6502d1d288bb6364ab38b4b82768cabb08791380ce2b24ec3d0de9e61338a0fa8bf6b739b2bc869ea8bea03b5ebbfa2360b65430f1f15cbb7f67a4623d896b58a936676e279ad4ac5b7389db94ab7aba8fea9659602f0651ab6317ffc58dd9af5b312045ae12f50540e395964a428e092fae1e79801cc3df3c951f7065a5a813298710338c4af1e7dfd7cb7740feea807e5c75eded798225ef5a40547f3654deb08fba2d0d0ac25e74a391654d28d99c51b003e70e3b6d4d4f1c5f33c86f663e1d50ed1cc89af465d18909d0ece297601ab44921ad9c4cee8c655a5008cacf260ece14920c384ff346e87928f850642bacc0fc3e4c8b8cfb35c4d81637eab11a02c2f6bef652eea3cda93518c648b5c2ae65624c9236d2acb41b26ab5aa8fa2b75ebd858d021cd072e194f74c004ddc116449f6a38ac1be76e552737e81a85060e59438ee3f50d0a6ced495bb2dd48cfdcaf8e9acd16eb8b82ba0fa62e5159075f840bad6e4a498a3c61d9c00f65fd1f1afa9ca78a9e8022f001220941e2e34d6d24c13b7cfe9de146b8ab54104cb40c09cd72317a94c95c8a102c1b9604c6740cc640c602ec754fa87b025ebb5154272249a8cb9b033ad3b02d4c6dc9b85e77cb9902a8db9d879cf980309897348451fce641f8a383c4f495ea18461bd7d3b69159dc8d514a8d561f2b77e9e5ffbd223b037485374b6160cfdf6a8ec03b6b65ad7a7a9f94a7306677c9f24d4445330e10711d97566b4b87b4128e92f18cdb30d2f3aa78b2f6354bc787114f14c9f1547ef64ad0922d1ff26056c34fc82994a6cf428b9dead07ff5895891e1544a38975436372f3c20c7d0d76940981965ebadd2be821756308b96c43772371ee91c51807304c9c8832676982657ecf8a0508905c2244f54113d38d1903c70c53c1653f3c155c32cc9ba1d58eb1ae8ed8b955d32713b99cc4f4114d003fbb0c710bf565ea32fa0e5193e10a2c07ac7ec84f0bf68429f56de80187bc755c396b047c17e15da1282c59f6cc43218f0a64e4f57add91d29de43956b94dc51615945066852131737b9f6d3607ca06f7ff7103ace7db1f53071800999d6045134b7b799d7cd25a15178cb01e48f82c6fdbabcaa83506f0d9de6224ac12d10cde37b7598fcf5f52c2548050fe4b1a121e71a19d3eff01293984708e21066eae97fcb903c554177cb70c82967dba5ca616ec9cc05644b6a4ae52d821ac4857a1c8216e0df388a1334fb145e28dd3fb1fae2ccd01914923d58cbd4eb859a449fe79b27e1d66166cda53c5cfb6ff89b8df8d8148b5a3214bd374049c829d416fa9236ddb6265b620cb10c08b0b7dac3deefba1a1210181eda5a408dfb3e937a827c807a3dd9941bb9f4ea29e56ea3088ce96f0579a3853ea2e7058f815370b38cdd7d10e2f24b517b4b4e94630cf1f5b4f87cf76e1b8a652853dd4a967c2308f7b2be3b487461f0b76ab0cb74caed5a0350cf0e7006119366285a2d1652aeee0fb36f94ef310c7046a0f63169f73f670729140f43594f9e5fc1b976828255f3ed290bcd09d7061b039718cf926a52d03655684ff70b91f2bbe25b056f69de436fbcbea31f0f1384cc77e23b88cd9288a808af7393cc000b8dbdadae1a8364a4c6c34a0786c16d838888296df20b87faab53276341768d30a95933173d6b6581e42fda2c6ec3e1964ae4667c6a800abb804b3a5033a1d42e108ed852393c5e9efb4116d8f33e619881df24091111b53b90da69891a8e62a9ddde444e3b12a784a8b96a24418ff788fff8ba32593b60d99ea7b65a9c785f7dc2b6e51ae3a421c209b0b934082d61e9184804b253d48cc5d9628a9ab04933ca4346b19f5b8d46b4afc6e78f463184377d78ab1fcc8326d0f70069add446eee58d608f39d6d59c0bc868826915bbab52a5977bb059f30f06535d102c07d844c8003408a8d92c3067217b0d1fd9cec8b7a41d6b261753e9510a6d776b5da25f72825a6e047659eaa3469b74251c90b1f537a305b2adff3505c6aded53eb66c1802710df2250127262d42b1ec79fa6b8050c2a115c8f09112fe352f9a631d31f5bd12011e8972f0584c802521b2f7c3be7631ba3267b167c0099ee0de6e217c0aef15db41f8eab6645132bf25b6f8bf5204f1a3b3fae33ae357d70ddf57e8394a4c03042726c2d526b6bd5857c70f7ea6c3edebf95d2ce67f0a1b3cacb44203c3c3358c5ffe0f74f0f4259dcb8745454edbf3d70970dfe95c39e0ecc6122db60271e82f82c734d36a3be64114ca02f985a20dc04e236c8db5104356ff074a020d3b672d2122c7d0bf6b9119868a069c90c32c10f8d63b67633b7f0797d25eb622eeffe4a7188b631f9147a0266ac6a129623789bd80ba5b0f1dc6aaac77e5c2f11c6f119883503e3123ed27ae73af181c5174fe0619ca2e2b8b84c6b15d331a973f7673f80b65d4c70dca20618a54557ebd3b35baaa629b7bd8d7785f5d73f77b9a500c9bda9efbb32c3d3e594a84fab59372abbb62b16a601a84a9f43d1fcbcae89823168ab03b5925557ad4cc96019df9926bcacf266e8d2b6a625c91e5515fafb0730f8d2216d6341b88ccdf9b5c8ce1b6751d7119622dfd9abe2e736d6fe32cbf37babb9a5733e7d08330de11a64602fc8b55167e416d55b64bebdb50f9d6b0115e6f896589ad501bd69781dd689391bcb3535e6a942d55933bc58b1e4340c52e4505b1aaa6b260aaf7fcfbeba12dfa78b1e0704af8729097e17e6ad8b4f9006a2b272bd97b1795a6ec3c08329bed4b932a1738b340a367f4f0e72cf7fb992092fe8b98dcd0a1423c56c44d49bf94d81628d46e4afae56ee541d63bb04b7da4631c7c1f490dd0e49019c92869924bf6caab377aceef581e0a137c0fb69dfc27a065d1bc89d798a2cc7022eea89f1c8c8aadeb061bc33a8f55f0ddf2fe8bbfaffab0f43dc07eba0e518c155355a3c7906ae2dbc0f4e21f7415faf7ed5ca64ba1bcf76e08277eb360bdbf752732c074d5cf73329df67daf0bf5b0db18175cf24a0623b117eba5f82aad0e13fa59f6bdc39c0bbb9b70e594c98cc78bd985a12cc81e1bb262d25a8853f25ec20ad16d1f339c38b5e49b07e0934c70092ab1ee131629fb781443b53359d2abac80645d5706c0b94f94b88f8b5beca5f3860a40d65478b44cdf0873ab34807b7aedc987bec5308ad5c700400c204ad32922046cad94bcbd405fd1698c2d0e0bab9cdcdaaeb52d209d377b592b968e3d91afeb5baebb08632f87b9ff124545b9862b27d3ee7026a67e9bebb4631d697dcd560840de920082b951dbe3d105afb67a31477c48fae4b45b57d83b579186b0e9884bd13e189d06bd79bba80f5cb36e447ce71239bd4d77591f7388993709b1fc94f2fda80cf8e6fde3d950a30585c97c711ab55584b5d1f3d78579d0628d09a0f84cb9a66e36ab98ddb1461aaf5258a726351182e23d3c8cccc40058231121d1307ab499de6b56f34f3ccfeeb1167d4e1bd0f8f10fa17e11f756b10beaa5bd87fc7a3a0e68652f43b51d65dfa6318326d1ee9dd19208cb13b77335c83e6f460698310a4ced0a353c7f6eb2a1b61847ce14c4326626459d2e8b5844f9240f8c758350d6da19e0554b76b293efd182ca45c34ad8a642e51f9be3c75c6707352ce67d27c0f3806fb13f5b6c8df79f732dcb17169d19f4bad5f1044bc051b64685f12a7dc520ac1761d4a564a920e8aa50d9531b96c709c4d4818b6814c7196f2f7efb19e339d9231e34e2f70b2a65a82c9fa5340e8a32bae4ec19a614dff8f562bb7afdd9644f35aa0eb455408721eea25cf59c144a1050126b8dc0d1bb30a9494504cd81b33fd9ac44b44b786015e3874804f0ee8a69529df4eacdecdae461f1966677c342f7335296fd9c4edbb8f8b9b8e1f337feaa7321cbb39ab12e6c6ebd5dac721a65efaebb2ee512fc88bb9d3250d805503ee825c01ad8864f45ed2621728002d7489022beb271418b9ecbcfbb0dd9e1a7dd9ad230e903053eeedb7676514f03212d1ff732fea4567391e882b01aaf05e685240b44793f9c78ae42739d50cf83c431d6b2fb34c26ed8ee60c1f121ce042b7b4eccb4984ffe8f3faf253b00c5aeca51d06df45b3a8a7b5a0cd3f55ba6cf07545f80a1ba1f975a2994e37682a8e613a18ab57435c8fc77198eae709403f746d449049001e7efadd10ed2d82aa7c6db2de7170e8b2736cf2e6e9eeec52d16063f00b733cbb83ce4b069c6e01b3b0299fb834f4f80cd3a70f15faedd63b01bcd48f8c927291c766cb069c298b1049b9aa535550cff7df9b56180c416e393bdf5fca32c3b87f2e56a1f9add6f62cb8d9f2fa93f190f57a775005c6b743d4378f3e7e90f33b608224c75438957b88714ef1043ca16e50769e5e5205e9d483fedd5b436eb0ae972d91fb2012e89494bba52d4905948c4e8f23d2ec68a41b11402eaea7773e1878c0767fcfded367471a5df445ca3182b4be2ed60c27a6bff4b9d550c37ef09d82397f2829039ba738366c388c311bffc26ac8efa9dc1ae8d9945ff085b5fa67881884e2e5f13a09a11c917f2ebabd836669010957c5fab2b453e8ee4f2bb9899f43bfde99d9e1deadf1150e0621feb15c2c3674a589566864f4a8cccb5673c6827e11968e7c26a58608a801d7da2d8db7f5dfd8e9f0b1f8e4e19e5abf647c09abf4eb5e50bc90a1bb1147135d64f70efd36b46800321267453ba170881473304dd43815a614d02dbb406baeb1b3ba5305256fe056efc4139acbe1299836495c980b9975154ddbb49bb5952c563f119f0fb6e62da4f347f624e9bf83bfa5074204b37382b54e8fcc2b4ec4a7a0d362552c818a533ccb8fa105519837a178c8d1c3189d1c8d738cbbb036ccb740469eead2e9628da0540536a786aece793088bff999f5ad16d3a117e115d77d5bb579469e65a76aeef50356f9f3d4466bfa0432734f6d0c0bbb85f71da0f905e51e617d2246f9509bd93f9c3b9e665b06104da0bad1cedfb2dcf180f6c63eb1781299d04659ffaa71757566d4fa65eca210ea4c0cb2c2e0c607736c6552946cdc204d3e8d08e7c2384fa8f3731b85472ec091a282cb71baf47e33d6176ecb59a58d1c8013e4d35e1083fb0b2f6824eb3b54365c2a7bf0767c706ae46d4466448ef906312c3351b17156ac14f07b156f6f19e790cd6668efdb7bf964a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000045300)={0x3bc0d5f2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x59, "78ccf893a24370"}) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000500)={0x0, r3, "38f6bf7b5ba154304d3e55f0d0da43f24b12c1644dd7e164ee19ac59216caef0abd86a2ecf7fca16b40f42e08ea7bb193c8d98c1a685d6a57dc0c8796002928dfb202dbe5c7420bb661b4b10934d61132f72d2c63c5d761c059b60e7e9001659b4af79cfaabe360be4e55f7175d88c64b2b2fa06db415fa8c6ef1f416b37575f1f2c6013644b4236f7c7b1d6528044629d8211bbb5080ef39d230b0f2a83e7c4e6bc64292414b4cbaf4045d99a3a9198662e6bec4c1ce382f9e332921ed3206c0a413de2696a075dac2be41f2329a54a273f4798f999ab1b70fcf6597d35616ec88170470afaf5314a9e514a83b9240556395c6470c0b7627f08f1962f40b3a4", "fd50a70ad273da568f2d3156767ad6ea697adc2b28f091bc721198a5082ad92c1ebbcacdd0ac79f97f8a5e2b04dc9068e02ad15cef8a5df25616cdbadeebbb8e3dbe5c25d82d9a8f898e45ba244302200db41fa9a247e36f91d4eb549dbeabf0d10baf8afed73e42d49b9980291c1acf3417cc1d089dd3d9d7e514c9f1ce1b33fd41dcba48a918bd99765a5c8c30a8705c3053e518dd275e6c437ac9a65e09469636160fae9bddafe01fe6599977c4f495710e9a080a08e992ede79e3eb48cec57ef1745eaee0f3babf8ad7a5c631cb0eed5aace15592947c78435882e47daf310b4790eadfd34e623042d9faa4683313a70a3ce2ce8e854f96326fb375a5cc65c068e4bcc3d4ca95786e8babce89feeb2f0ef04848aa49e083cca1b0d82e990e4a170387bcab66b87cb81aff4e4efb369bc94eb30db633775f7332646190c6d9e46afb9d480cf5fcb77725eff3d1c17239744a629c57a2e793fae44f21b027e7baf084ff6e19cd33f6b17dea0af7f103da8ec13791883976340498a2b0286499eb3e2e2d217e0b3687fa12e067e67dcd9831881380972921e9b09e857ac5e67ccd1500f4c332837f1b9a58ef91931cf83f4ac33154afbc498e035400e49f0949e54a7197eed697a5e6a7a4b51f0af93c8994ebf0cda0e50a6e34f0c9988c32f153918e0c5dc0aff9a47c89725b05896a918c36dacd1094310a7ebf18567abac554e256e7e6d2ec1ef33f5be6265c6481279e91044af70dfc82aa655c4fd2682571df84cb0b06fc4c231e215424dc9818a7d4d8ca977c010e9bd2df077755437be63b2c536cf2daebb2f1c397d807570dd5efd1139dd72658f0c2b17d79d331a68caa11719031b095caa9625bec8056bf857da313f879d0fe4d81020087adb9dcb0875bcbff2110322c26c4d66bc6a66737010d16d2f0937ca35398019c10da49a36a8f1afd398fb2163552d2b5acc6b1beb7af3562fa3ba0cdd0e424ca50a02da327eab0a538ccf6032615f5c281825ac6a71afb752c7415f73346b1a6c24acd4a45497692598a7c6003fdb3c41f8205f681f30bded3b774315116ff52ff7eeccbf2871088980e963f70085694a5b401e64e82e788656c0afd6d23372ee521e382abfd4ff54eb1cd875a503b8e0ae145701eb0ea6daf73649f7b9105d1c40da36048bfb8add5ee414165cd836fba68fa76132deae1e232611e12b5394d946d2766caac94f8687c9ec77c6e700778ce50b58cf25a1bda2244627c5a3a7a859ea0d689056fbf6f324da66870505f82e445a60f3a698232a87fb56e8b367722a08ac222ae5523c8fd5ae3d9438bd36d9303bdfdcd1b62901113bcfa848492ed8481a243a71d4f303e22624bbaef1cbb547aac745f8c38eebf010a9bd8c61e372b7d98e4d43c798062fc001a13bea8148fe30ed258ca0dbb7b643cfe997889ba9c5f2b0776b64e6252d31e8a30a8927fe7ae278f23dbc034e19c999380ece59def994c67d671ce100b52a2a22232422811ab786eacbae0da591ff27813e8c7c10c34e6fe2b1eab0d9917e128fdfc0b5b3e9f2f97138cc93216f8c0008e23fe2a8fcddcdcfb04bdcdf125a069f8db95a22594b607def79bf6650f493cd8be526f9e30303a57fd510826555283d08f0712ae3675af43acdbc06dce20856ff7a592feca80c262975c5d1e6b6178f6633dce30867aa3464c3c4a21ee1da546cd6f05142fbdcf6f5d5d2335ebcd1f466104e9ad19ff5567af87102e7ba3645c428cd69814f208405ebd5910eb27cf72349cc49e528e960ba73d1cfd065f982bbfcf725e335d8dfd56038d6d81999fd15f25506c4b06da3ce9b07a1320a3f2aefaf9329d9ac6124fd9148d3ae4c2af89437e77f8b64067535b9e32260285e963c8f49cf56bf0b1d53f146b56b923e03be80849d702c6ea0a09e26281da68f81840fb8a47fa81a6b7ac14d7c84668c85712c9b22c660c5fb4837a29c8fe82c3a127b0b785a830a347c4464db3ec59997866c943b51e5ee114b5acd47cb5d0f389a25314b60e7f3557e172ca11af23ee08dfb21e8d74ddaebd44799ece3c7e16b233f79ae5974127483eb4a8d8f96a8c155e362d65c9bca0297b378f7798682759c0f6939a7392f4b5270ec96dd4e423c4abc5712c3e143c71d28165c8d649b2f5e9673d5f60852cfb2f703a77e0ef9323ff1d62760c211aa96fe614a11a8c1e14643cb9d21e9ebde77c19ee9c756c6ee1cbb65dbd4a1f25ae78b7d39e35709b75a77aa9e5819b14a3dcec012e262c99a80bdd847ff44e598bd2fa8fdf93b7bd68c5929498f20a4d90487c35459054a9a0aab0e3287f89b58277e0f67451d9e9b54cb0b95b78dde2c17293857c7b90b505f35fc252fe16ed6e38ae9f6da6647d823027c588ac1c89ffcfc335ec5ddeceff950d81a3e5a592b2212399b2d1afb20206fa31ec6a41d8b37b127ab47e9676e247d62d3f9baf101ed43519a82236433a77bdd46d960404ad8a836dd4ca1c38a660d394ca0012e69190f76c878e5a442b6a4eb43bbd0076d3de3fafc12a5f301633b7a7c3da03cb792779a228858636609304319233db907806931c006e39c28f195dd9c3d163f65d7e9c386a4fe9c8a17e924e62bf526f745bd1d8beb5f4f2d0027c190c741796cbd0e9e9078dce4859677e3bc7cd823baf8f6058117933991c8e160eefafcc473750b28f55f98303a4a9ed5e8dfe91c98ea7051bdb3701633d33b4a96f9be0213e6fb4c9980265047e0a80453e43bffc2c72a405588196a0658a8a0ec85f861683e23245105545f71feb1f458c358c5d3ed6f8ebd02baa06c4dbb926a7e8ca065c2d94eb79474247ae92ff6bd5704ef6e46521e90601bbaea9f3bb72e2cc8718ca4a6ef013a5cda5daf97599a349457ad8145b091bbb7c5323dd88dc39095bbdcb5d6cfddc3f3101741dde9d4f04f14c0a2dc052ab9311ab8496b079fb4ed4051bbf860ab46885939385bce84d66d6291d5c380a1d4e63ae7466efce8c76ebc43205b19aaf0878faec474fcb7981a102c63c1b51c9f720e24776d9f447f8e82bab85a401729d9757fd4947f82d7e5db3c3414f5ef4c25864cf5af79a989d143042467a93415bd2770ab7edaa2b0ab0840e2a60e2efb4ac0d005b9f00397c9d3bdf16f273a9104f0f66082f22f0d2ad265ef01777d564fee6a1d0ce47c505fb1ed51fcd6d4daa156f43858504af75cb8b78efa3115719fc483afe655269ec5dad2f92f48f9f6a8f4dded1c9441eff4686e89d805b4df274bd4ae87b297f58dbf7abfbae1deabb6d8e5a1e1f65467ad21f28ddd8116c72b623495a4b0e38ee2510203f477874d1d65c13427b2e1fff53719f9f1d6ac4d0912bf4672a86e8604d77ba04c8bf9867929f18c32b1b7b8cfdcfa261a582b4fe389f2e93ef03958d5d1a3a3fee33e7502d81755ba86c28138960323ea1a46fac6026614b130bc99174bb226f89a99ede9b09e361a95a49eafc989c241f3959364ea28976d0ea1e42a18c64e8037860be0cf5748e8756cdcba84cbb3f6f13ecdca95b8d8c070ec2cd29d477117f7d71687893908f2f4c3656df79b5ea3ba8a44f0d42a2f82ef4a08fa709fb2da93b13cc1e6a52bb3393a619e87a1fd3984d11361ae4c868d09193a505ca691ad290a093e984986a2df75f0ba61ade94d78e3984c2325a1344b75e00712e4cbdb94158beba54c648b6107e87d5197542284d8a3080705fdeb55dea97181dcbfe9f311082767c2579f0ddc03deb258c151dd46b04cab66c91af6424d73ab91d0f6f71b1f60fbcad0d312e1886c967380a8289d7090ba22835c593bb0c28a51fb839561cf53ff3ac2e3360729fba92175a6996f8027d1f60c32035c135bf3eae5dbece31d2312af9d9424a7bbf5567b87049cd6f81a0446c5e72df5fb5f743c25f40e1a174249694d574348d2070ed15c660744fc9dd37fe8819c7e95a8721c0308d7cf476c6180a809259ff6103b5245c0098ffcfc92ec5e1bb7d104355b7911247315d503570ecf78bc17430cb64ca8092b805af8a8b5566a1e30d4a1a8b3a9c0225284ee405b7ef17e43d199bfa1defdf105b44f6e5433bab200cdc2504ac79d1b7a8097e6f521912d45d312df0ab4c49ed33854fb16490937026ac2587213a22f89fd88324d47c06e5ef06e66396f520dbe468295906e80b7a1c4da6e9968f73076bad552ee49363e5930e7db8443d230e36be11346ac6a52bd0c0077496d00a020e9a9185d29bee9bb2cef551a043d073bc7a616fced8ecd7d7c8c98fa7a6b4312d9d03259014baaae2e91629827403a08e019a95e1b7e13dc601db935caf700f42dac3b09997d263b2e5f32345df69e6b343294f9edb6ab0aca0ed689d27d46146fcb53dad5d488938b88000e70026341e06bbc30cf4064e9e9e05427649fe04107e431b1a84a2e849ecc3d0656644b6643591870de6d3c863e4238727c72af2dc79bf49a086df4149e55634d844b6e2edc2ee46c822bab679530b871b8ddcea711d09d81b8297f27bdcc6f42bf8b86c7d520aed38293364e6603523215036898aaeccefa1cd0879f1f1571c3bbecd0d37ec2da4fda9e15e8cbb2c49a6d36e3390ad3a36ae6b946559bbe59389b4b47506d9510e2771f00362fd8812610fc59279cc270e6cf007056e9120018a3a208b3a394f2b6b65b875a70b8e35e1bbda10a5cdf546b4252853dd8093e2edc6366801cfea3473c9cda39972149171049d9bb8e47e2328d125d66ff218a5e8e6f543f2f741219c202c984f300c526027e1c7b8329d50987128836f0f8b2b08d6be4dddeda63193244c8c42c10e8400f2e3393d2a4d9c17a040d329679947e328502ab29598853b6c03ef949face7572f8614431333db3e43f42ee734c7c607ae35d299fba86f3ecd75a54c9657f1903e2de0ab6167c2cc500d707e725a4312f06091de8194102b4ced154616f603861d767506b64b7fce107e3e8faaabc785e0b091c8d06e9ed741dbbb118f4306ddbcad445d99fe358a3e57df0a59511f0781ebba0a93152df6686a2343058ac6910d319c388f5823becf4b4b7424c3c26304ca00ceb702601d5940f913d4f52ac2f7c84502a345ccd0526580629ed3b4e551785a161a543d0c05a8fdaf3981b04c9d1822d0f61ce13646db1f8155598ec663d86fd952d88f0879beee854aa2d7ca78d60118919e4fd965980f6245f454637ad9968c5679dc677250ed7406d0367fb799a72767d345d273e54ca824a083e77d63941afed640cf349282bcfc773e1005a24640dd06c2e3e1b5bf820066cd67d4e482163cf865a990286164a209721a4de34d1b8dcb4496fa9e270a9c5bde484d005437f4fd03a278c6f7918b21c74562db31bec2b88a217f344797d8836f0f96192aa66887365ecd933e4f3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000380)={0x0, r3, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046300)={0x127, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x70, "bcf22356ea9984"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000047300)={{0x0, 0x1f, 0x3, 0x2, 0x100000000, 0x3, 0xf81f, 0x8, 0x80000000, 0x8, 0x1ff, 0x4, 0x6}}) r6 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000500)={0x0, r7, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000000380)={0x0, r7, "0e8ffe98bf774cea9884938dc7885e69a8dec3f7d02a255b6b673c121ad3006a658a31fe05e5010c21cf7fe01f59d0c6361eb361beb2094b7e4b0a887188731670ad5681c62e9f81f90006f6acfbe17494f7ffdf692719150bad35f355f63a1d231ec318ae9e1a5202bb8a8b30ee96f60cfac6887bcbbd90bdae89d2ab2f31bbda16dd1a7509fbf64840658236eef50b6d66e8c2c52ccad9ca4f4210704da2a73eac666b81f907f456b9f5b7734e06d2deab03e73ab9890cf6405232d037e712d678c0634afd71e53e6a3eb1147087e5a924054402ec3c7898c57f450250efbbd829bb80e66d22dd2538919016e06200161b898dc646b35ae2f3742a4e49f5c2", "449637c14fbbed8e10b86bb3a0020088f4c4afaf11f213f18342facf10920af128f85f6e26314f4b660953f3910cc88821597331af171cda993566aa4e97c842d753e1d585cf66e5aa09764e8991054e56dd8c6927b105535066653fe791ad2f628696f485a53705ef8494cfe355938aa0053598fd90e2c46fe7097c3e991fa4cba2c622e025e27dddbad3cc2c3cd0c635ecdb30e6502d1d288bb6364ab38b4b82768cabb08791380ce2b24ec3d0de9e61338a0fa8bf6b739b2bc869ea8bea03b5ebbfa2360b65430f1f15cbb7f67a4623d896b58a936676e279ad4ac5b7389db94ab7aba8fea9659602f0651ab6317ffc58dd9af5b312045ae12f50540e395964a428e092fae1e79801cc3df3c951f7065a5a813298710338c4af1e7dfd7cb7740feea807e5c75eded798225ef5a40547f3654deb08fba2d0d0ac25e74a391654d28d99c51b003e70e3b6d4d4f1c5f33c86f663e1d50ed1cc89af465d18909d0ece297601ab44921ad9c4cee8c655a5008cacf260ece14920c384ff346e87928f850642bacc0fc3e4c8b8cfb35c4d81637eab11a02c2f6bef652eea3cda93518c648b5c2ae65624c9236d2acb41b26ab5aa8fa2b75ebd858d021cd072e194f74c004ddc116449f6a38ac1be76e552737e81a85060e59438ee3f50d0a6ced495bb2dd48cfdcaf8e9acd16eb8b82ba0fa62e5159075f840bad6e4a498a3c61d9c00f65fd1f1afa9ca78a9e8022f001220941e2e34d6d24c13b7cfe9de146b8ab54104cb40c09cd72317a94c95c8a102c1b9604c6740cc640c602ec754fa87b025ebb5154272249a8cb9b033ad3b02d4c6dc9b85e77cb9902a8db9d879cf980309897348451fce641f8a383c4f495ea18461bd7d3b69159dc8d514a8d561f2b77e9e5ffbd223b037485374b6160cfdf6a8ec03b6b65ad7a7a9f94a7306677c9f24d4445330e10711d97566b4b87b4128e92f18cdb30d2f3aa78b2f6354bc787114f14c9f1547ef64ad0922d1ff26056c34fc82994a6cf428b9dead07ff5895891e1544a38975436372f3c20c7d0d76940981965ebadd2be821756308b96c43772371ee91c51807304c9c8832676982657ecf8a0508905c2244f54113d38d1903c70c53c1653f3c155c32cc9ba1d58eb1ae8ed8b955d32713b99cc4f4114d003fbb0c710bf565ea32fa0e5193e10a2c07ac7ec84f0bf68429f56de80187bc755c396b047c17e15da1282c59f6cc43218f0a64e4f57add91d29de43956b94dc51615945066852131737b9f6d3607ca06f7ff7103ace7db1f53071800999d6045134b7b799d7cd25a15178cb01e48f82c6fdbabcaa83506f0d9de6224ac12d10cde37b7598fcf5f52c2548050fe4b1a121e71a19d3eff01293984708e21066eae97fcb903c554177cb70c82967dba5ca616ec9cc05644b6a4ae52d821ac4857a1c8216e0df388a1334fb145e28dd3fb1fae2ccd01914923d58cbd4eb859a449fe79b27e1d66166cda53c5cfb6ff89b8df8d8148b5a3214bd374049c829d416fa9236ddb6265b620cb10c08b0b7dac3deefba1a1210181eda5a408dfb3e937a827c807a3dd9941bb9f4ea29e56ea3088ce96f0579a3853ea2e7058f815370b38cdd7d10e2f24b517b4b4e94630cf1f5b4f87cf76e1b8a652853dd4a967c2308f7b2be3b487461f0b76ab0cb74caed5a0350cf0e7006119366285a2d1652aeee0fb36f94ef310c7046a0f63169f73f670729140f43594f9e5fc1b976828255f3ed290bcd09d7061b039718cf926a52d03655684ff70b91f2bbe25b056f69de436fbcbea31f0f1384cc77e23b88cd9288a808af7393cc000b8dbdadae1a8364a4c6c34a0786c16d838888296df20b87faab53276341768d30a95933173d6b6581e42fda2c6ec3e1964ae4667c6a800abb804b3a5033a1d42e108ed852393c5e9efb4116d8f33e619881df24091111b53b90da69891a8e62a9ddde444e3b12a784a8b96a24418ff788fff8ba32593b60d99ea7b65a9c785f7dc2b6e51ae3a421c209b0b934082d61e9184804b253d48cc5d9628a9ab04933ca4346b19f5b8d46b4afc6e78f463184377d78ab1fcc8326d0f70069add446eee58d608f39d6d59c0bc868826915bbab52a5977bb059f30f06535d102c07d844c8003408a8d92c3067217b0d1fd9cec8b7a41d6b261753e9510a6d776b5da25f72825a6e047659eaa3469b74251c90b1f537a305b2adff3505c6aded53eb66c1802710df2250127262d42b1ec79fa6b8050c2a115c8f09112fe352f9a631d31f5bd12011e8972f0584c802521b2f7c3be7631ba3267b167c0099ee0de6e217c0aef15db41f8eab6645132bf25b6f8bf5204f1a3b3fae33ae357d70ddf57e8394a4c03042726c2d526b6bd5857c70f7ea6c3edebf95d2ce67f0a1b3cacb44203c3c3358c5ffe0f74f0f4259dcb8745454edbf3d70970dfe95c39e0ecc6122db60271e82f82c734d36a3be64114ca02f985a20dc04e236c8db5104356ff074a020d3b672d2122c7d0bf6b9119868a069c90c32c10f8d63b67633b7f0797d25eb622eeffe4a7188b631f9147a0266ac6a129623789bd80ba5b0f1dc6aaac77e5c2f11c6f119883503e3123ed27ae73af181c5174fe0619ca2e2b8b84c6b15d331a973f7673f80b65d4c70dca20618a54557ebd3b35baaa629b7bd8d7785f5d73f77b9a500c9bda9efbb32c3d3e594a84fab59372abbb62b16a601a84a9f43d1fcbcae89823168ab03b5925557ad4cc96019df9926bcacf266e8d2b6a625c91e5515fafb0730f8d2216d6341b88ccdf9b5c8ce1b6751d7119622dfd9abe2e736d6fe32cbf37babb9a5733e7d08330de11a64602fc8b55167e416d55b64bebdb50f9d6b0115e6f896589ad501bd69781dd689391bcb3535e6a942d55933bc58b1e4340c52e4505b1aaa6b260aaf7fcfbeba12dfa78b1e0704af8729097e17e6ad8b4f9006a2b272bd97b1795a6ec3c08329bed4b932a1738b340a367f4f0e72cf7fb992092fe8b98dcd0a1423c56c44d49bf94d81628d46e4afae56ee541d63bb04b7da4631c7c1f490dd0e49019c92869924bf6caab377aceef581e0a137c0fb69dfc27a065d1bc89d798a2cc7022eea89f1c8c8aadeb061bc33a8f55f0ddf2fe8bbfaffab0f43dc07eba0e518c155355a3c7906ae2dbc0f4e21f7415faf7ed5ca64ba1bcf76e08277eb360bdbf752732c074d5cf73329df67daf0bf5b0db18175cf24a0623b117eba5f82aad0e13fa59f6bdc39c0bbb9b70e594c98cc78bd985a12cc81e1bb262d25a8853f25ec20ad16d1f339c38b5e49b07e0934c70092ab1ee131629fb781443b53359d2abac80645d5706c0b94f94b88f8b5beca5f3860a40d65478b44cdf0873ab34807b7aedc987bec5308ad5c700400c204ad32922046cad94bcbd405fd1698c2d0e0bab9cdcdaaeb52d209d377b592b968e3d91afeb5baebb08632f87b9ff124545b9862b27d3ee7026a67e9bebb4631d697dcd560840de920082b951dbe3d105afb67a31477c48fae4b45b57d83b579186b0e9884bd13e189d06bd79bba80f5cb36e447ce71239bd4d77591f7388993709b1fc94f2fda80cf8e6fde3d950a30585c97c711ab55584b5d1f3d78579d0628d09a0f84cb9a66e36ab98ddb1461aaf5258a726351182e23d3c8cccc40058231121d1307ab499de6b56f34f3ccfeeb1167d4e1bd0f8f10fa17e11f756b10beaa5bd87fc7a3a0e68652f43b51d65dfa6318326d1ee9dd19208cb13b77335c83e6f460698310a4ced0a353c7f6eb2a1b61847ce14c4326626459d2e8b5844f9240f8c758350d6da19e0554b76b293efd182ca45c34ad8a642e51f9be3c75c6707352ce67d27c0f3806fb13f5b6c8df79f732dcb17169d19f4bad5f1044bc051b64685f12a7dc520ac1761d4a564a920e8aa50d9531b96c709c4d4818b6814c7196f2f7efb19e339d9231e34e2f70b2a65a82c9fa5340e8a32bae4ec19a614dff8f562bb7afdd9644f35aa0eb455408721eea25cf59c144a1050126b8dc0d1bb30a9494504cd81b33fd9ac44b44b786015e3874804f0ee8a69529df4eacdecdae461f1966677c342f7335296fd9c4edbb8f8b9b8e1f337feaa7321cbb39ab12e6c6ebd5dac721a65efaebb2ee512fc88bb9d3250d805503ee825c01ad8864f45ed2621728002d7489022beb271418b9ecbcfbb0dd9e1a7dd9ad230e903053eeedb7676514f03212d1ff732fea4567391e882b01aaf05e685240b44793f9c78ae42739d50cf83c431d6b2fb34c26ed8ee60c1f121ce042b7b4eccb4984ffe8f3faf253b00c5aeca51d06df45b3a8a7b5a0cd3f55ba6cf07545f80a1ba1f975a2994e37682a8e613a18ab57435c8fc77198eae709403f746d449049001e7efadd10ed2d82aa7c6db2de7170e8b2736cf2e6e9eeec52d16063f00b733cbb83ce4b069c6e01b3b0299fb834f4f80cd3a70f15faedd63b01bcd48f8c927291c766cb069c298b1049b9aa535550cff7df9b56180c416e393bdf5fca32c3b87f2e56a1f9add6f62cb8d9f2fa93f190f57a775005c6b743d4378f3e7e90f33b608224c75438957b88714ef1043ca16e50769e5e5205e9d483fedd5b436eb0ae972d91fb2012e89494bba52d4905948c4e8f23d2ec68a41b11402eaea7773e1878c0767fcfded367471a5df445ca3182b4be2ed60c27a6bff4b9d550c37ef09d82397f2829039ba738366c388c311bffc26ac8efa9dc1ae8d9945ff085b5fa67881884e2e5f13a09a11c917f2ebabd836669010957c5fab2b453e8ee4f2bb9899f43bfde99d9e1deadf1150e0621feb15c2c3674a589566864f4a8cccb5673c6827e11968e7c26a58608a801d7da2d8db7f5dfd8e9f0b1f8e4e19e5abf647c09abf4eb5e50bc90a1bb1147135d64f70efd36b46800321267453ba170881473304dd43815a614d02dbb406baeb1b3ba5305256fe056efc4139acbe1299836495c980b9975154ddbb49bb5952c563f119f0fb6e62da4f347f624e9bf83bfa5074204b37382b54e8fcc2b4ec4a7a0d362552c818a533ccb8fa105519837a178c8d1c3189d1c8d738cbbb036ccb740469eead2e9628da0540536a786aece793088bff999f5ad16d3a117e115d77d5bb579469e65a76aeef50356f9f3d4466bfa0432734f6d0c0bbb85f71da0f905e51e617d2246f9509bd93f9c3b9e665b06104da0bad1cedfb2dcf180f6c63eb1781299d04659ffaa71757566d4fa65eca210ea4c0cb2c2e0c607736c6552946cdc204d3e8d08e7c2384fa8f3731b85472ec091a282cb71baf47e33d6176ecb59a58d1c8013e4d35e1083fb0b2f6824eb3b54365c2a7bf0767c706ae46d4466448ef906312c3351b17156ac14f07b156f6f19e790cd6668efdb7bf964a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000048300)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0, r1}, {r3, r4}, {r5}, {}, {r7}], 0x6, "7a573ea53e8995"}) prctl$PR_SET_PDEATHSIG(0x1, 0x26) syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000000000)=ANY=[@ANYBLOB="d0000000080211000000080211010000003f8f20d080227ba8fba41075047c3d8316fa8cc452e29bdacc47f4c711d9cb2d90e59fed6ffd0d29d5d8fddf11be8fed7133a0b7f4433ec763f7aa9dbcf9d063316dd4e05066a89919cf4c8ff935b78a8e9b96c99ca2375d2f29bc0a7affffffff7a7ab6555e005d0ff48f78e0e266c68caf4b0b986b19328f00d540818ecc3c9d56e6d8ef88641c95851533679a15bd328d039091c7207641abb769dac973b7713573aead4d60aad6b4177bf83fefef49f4c2e9b1183b2d16ee2b7533e7a69b8deb2460ddbb30aca1b8d84f808edd1a5fb9b75e25950a"], 0x21) [ 1817.811039] Invalid ELF header magic: != ELF 04:54:11 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2}) [ 1817.834878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1817.841548] FAULT_INJECTION: forcing a failure. [ 1817.841548] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.843452] CPU: 1 PID: 9826 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1817.844448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1817.845449] Call Trace: [ 1817.845777] [ 1817.846082] dump_stack_lvl+0x8f/0xb7 [ 1817.846594] should_fail_ex.cold+0x5/0xa [ 1817.847126] ? __kernfs_new_node+0xd4/0x8c0 [ 1817.847676] should_failslab+0x9/0x20 [ 1817.848178] kmem_cache_alloc+0x5a/0x410 [ 1817.848718] __kernfs_new_node+0xd4/0x8c0 [ 1817.849263] ? lock_release+0x3b6/0x750 [ 1817.849804] ? __pfx___kernfs_new_node+0x10/0x10 [ 1817.850423] ? __pfx_lock_release+0x10/0x10 [ 1817.850975] ? lock_acquire+0x32/0xc0 [ 1817.851492] ? up_write+0x1b0/0x520 [ 1817.851982] kernfs_new_node+0x97/0x120 [ 1817.852515] __kernfs_create_file+0x55/0x350 [ 1817.853085] sysfs_add_file_mode_ns+0x21c/0x440 [ 1817.853695] ? __pfx_dev_attr_store+0x10/0x10 [ 1817.854283] internal_create_group+0x322/0xb20 [ 1817.854884] ? __pfx_internal_create_group+0x10/0x10 [ 1817.855523] ? kernfs_add_one+0x17a/0x4f0 [ 1817.856074] ? kernfs_create_link+0x1bb/0x240 [ 1817.856651] internal_create_groups.part.0+0x90/0x140 [ 1817.857311] sysfs_create_groups+0x29/0x50 [ 1817.857881] device_add+0x711/0x1ec0 [ 1817.858371] ? __pfx_dev_set_name+0x10/0x10 [ 1817.858929] ? __pfx_device_add+0x10/0x10 [ 1817.859468] ? __init_waitqueue_head+0xca/0x150 [ 1817.860087] netdev_register_kobject+0x17e/0x3b0 [ 1817.860705] register_netdevice+0xd60/0x1530 [ 1817.861294] ? __pfx_register_netdevice+0x10/0x10 [ 1817.861934] ? dev_addr_mod+0x29e/0x350 [ 1817.862449] __tun_chr_ioctl+0x210b/0x3f80 [ 1817.863001] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1817.863591] ? __pfx___fget_files+0x10/0x10 [ 1817.864138] ? lock_acquire+0x32/0xc0 [ 1817.864657] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1817.865224] __x64_sys_ioctl+0x19e/0x210 [ 1817.865760] do_syscall_64+0x3f/0x90 [ 1817.866256] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1817.866920] RIP: 0033:0x7fcb82d36b19 [ 1817.867423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1817.869623] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1817.870595] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1817.871488] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1817.872353] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1817.873236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1817.874114] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1817.875024] [ 1817.900488] Invalid ELF header magic: != ELF [ 1818.008513] FAULT_INJECTION: forcing a failure. [ 1818.008513] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.010625] CPU: 1 PID: 9835 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1818.011640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1818.012642] Call Trace: [ 1818.012972] [ 1818.013276] dump_stack_lvl+0x8f/0xb7 [ 1818.013811] should_fail_ex.cold+0x5/0xa [ 1818.014336] ? __kernfs_new_node+0xd4/0x8c0 [ 1818.014904] should_failslab+0x9/0x20 [ 1818.015409] kmem_cache_alloc+0x5a/0x410 [ 1818.015942] __kernfs_new_node+0xd4/0x8c0 [ 1818.016492] ? lock_release+0x3b6/0x750 [ 1818.017010] ? __pfx___kernfs_new_node+0x10/0x10 [ 1818.017652] ? __pfx_lock_release+0x10/0x10 [ 1818.018226] ? lock_acquire+0x32/0xc0 [ 1818.018747] ? up_write+0x1b0/0x520 [ 1818.019261] kernfs_new_node+0x97/0x120 [ 1818.019789] __kernfs_create_file+0x55/0x350 [ 1818.020363] sysfs_add_file_mode_ns+0x21c/0x440 [ 1818.020964] ? __pfx_dev_attr_store+0x10/0x10 [ 1818.021582] internal_create_group+0x322/0xb20 [ 1818.022187] ? __pfx_internal_create_group+0x10/0x10 [ 1818.022848] ? kernfs_add_one+0x17a/0x4f0 [ 1818.023402] ? kernfs_create_link+0x1bb/0x240 [ 1818.023984] internal_create_groups.part.0+0x90/0x140 [ 1818.024648] sysfs_create_groups+0x29/0x50 [ 1818.025194] device_add+0x711/0x1ec0 [ 1818.025697] ? __pfx_dev_set_name+0x10/0x10 [ 1818.026285] ? __pfx_device_add+0x10/0x10 [ 1818.026850] ? __init_waitqueue_head+0xca/0x150 [ 1818.027474] netdev_register_kobject+0x17e/0x3b0 [ 1818.028097] register_netdevice+0xd60/0x1530 [ 1818.028699] ? __pfx_register_netdevice+0x10/0x10 [ 1818.029328] ? dev_addr_mod+0x29e/0x350 [ 1818.029872] __tun_chr_ioctl+0x210b/0x3f80 [ 1818.030428] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1818.031017] ? __pfx___fget_files+0x10/0x10 [ 1818.031578] ? lock_acquire+0x32/0xc0 [ 1818.032107] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1818.032678] __x64_sys_ioctl+0x19e/0x210 [ 1818.033217] do_syscall_64+0x3f/0x90 [ 1818.033731] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1818.034394] RIP: 0033:0x7f2e2b599b19 [ 1818.034871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1818.037063] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1818.038035] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1818.038907] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1818.039787] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1818.040661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1818.041555] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1818.042468] 04:54:11 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fxTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1818.138260] Invalid ELF header magic: != ELF 04:54:25 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:25 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 46) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:25 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsT\n\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:54:25 executing program 3: syz_80211_inject_frame(&(0x7f0000003140)=@broadcast, &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x400}}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1}}}}, 0x21) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x9, 0x8, 0x6, {0x7, 0x25, 0x1, 0x2, 0x1, 0x37}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x201, 0x81, 0x81, 0x7, 0x40, 0x5}, 0x5, &(0x7f0000000900)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x403}}]}) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_a, @from_mac, @device_a, {0x9, 0x43b}}, @a_msdu=[{@device_b, @device_a, 0xea, "b74eeccf6d346b1c3e607c272050b546708ef72630c52d227aa59f301b7d6d8912d3e72167107bcb7c236ae3ce5dafcc922e5909657bfb26500ecbf6d3347f2a6aa6ec2183aee705e7bf25e9be62be9c6011f0c053bc2b590c101360ab15402b294db958971ebaee90174edd37713a2705c17ead53a094de4e4877cdee7790749b6d3d387294c73dd62277122636e9ec9ee91e264175e5d998d2a961ce402b8362f854fb1a14c6928c32f49c06f261be019e81cf7bb1a11a591cfecb09125393f672df326dd9519a099e02dca7bd693d9a89b8dd51ed23d94d7a83a24160fef8913bfa4a056fa7c3d342"}, {@device_b, @device_a, 0x3d, "7df100e485aac09754b61afdc12640a09e956ebe6478c0b453a9afe5638d3e16dd93dbed5b60aa64cb8110284676bde3994a867d1da370f3e5ae01ea62"}, {@device_a, @device_b, 0x6b, "119089bc6a7a009cfac80f15da02eecd6e85e80305ce2667b9d5b2b66f3a09d7c9c5f9021ea36d0c0fd46b644b5fef6c7e6b931253d6b07a62d4a733287d85f0de8dad2a0429075db71a7c137a8e40494356122f9d6cd276d7f51626bf6ef26b03d195c99e14d9f9327f38"}, {@device_b, @device_a, 0x72, "5fedce1abdbbf4012b9f63e8075168659ea9885a488b427e57496719b85738d77c9105dbff7051753b1072ad83dc782e4d76008b265720e3f3abadff9b15f92d311a62287f737fc3737c3f52d50a5311a7c78e0bab0a3eecbaa0313f7ed9a5a1f15b7c21c24e5434b0bb6cdb702694b3c804"}, {@broadcast, @device_a, 0x78, "fa18bd3a540fafa529bb66739db1b27262c0bdf46a43290b38b6326e3a6aad7fbab899ad76d821575d21700909a7107d51ef020f1a3ff43f25b5824ce913c962f5e26a03dfa47d2bedf48e18b1c970530f8a4b705192849c1436dd0d62b9431803d2f50773d74ea5eb0f03b175ce9114a4d3d9db845fe1d7"}]}, 0x2e0) 04:54:25 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 49) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:25 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 36) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:25 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:54:25 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2}) [ 1831.907319] Invalid ELF header magic: != ELF [ 1831.925065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1831.945349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.946310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.971094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:54:25 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsT%\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1832.001257] FAULT_INJECTION: forcing a failure. [ 1832.001257] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.003157] CPU: 1 PID: 9870 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1832.004218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1832.005252] Call Trace: [ 1832.005609] [ 1832.005912] dump_stack_lvl+0x8f/0xb7 [ 1832.006454] should_fail_ex.cold+0x5/0xa [ 1832.007022] ? __kernfs_new_node+0xd4/0x8c0 [ 1832.007612] should_failslab+0x9/0x20 [ 1832.008131] kmem_cache_alloc+0x5a/0x410 [ 1832.008685] __kernfs_new_node+0xd4/0x8c0 [ 1832.009241] ? irqentry_enter+0x2a/0x60 [ 1832.009804] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1832.010481] ? __pfx___kernfs_new_node+0x10/0x10 [ 1832.011129] ? perf_trace_preemptirq_template+0x272/0x410 [ 1832.011864] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1832.012611] ? map_id_range_down+0xd5/0x340 [ 1832.013224] kernfs_new_node+0x97/0x120 [ 1832.013808] __kernfs_create_file+0x55/0x350 [ 1832.014411] sysfs_add_file_mode_ns+0x21c/0x440 [ 1832.015059] ? __pfx_dev_attr_store+0x10/0x10 [ 1832.015677] internal_create_group+0x322/0xb20 04:54:25 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2}) [ 1832.016304] ? __pfx_internal_create_group+0x10/0x10 [ 1832.017165] ? lockdep_hardirqs_on+0x7d/0x100 [ 1832.017789] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1832.018535] internal_create_groups.part.0+0x90/0x140 [ 1832.019228] sysfs_create_groups+0x29/0x50 [ 1832.019819] device_add+0x711/0x1ec0 [ 1832.020341] ? __pfx_dev_set_name+0x10/0x10 [ 1832.020931] ? __pfx_device_add+0x10/0x10 [ 1832.021490] ? __init_waitqueue_head+0xca/0x150 [ 1832.022155] netdev_register_kobject+0x17e/0x3b0 [ 1832.022804] register_netdevice+0xd60/0x1530 [ 1832.023404] ? __pfx_register_netdevice+0x10/0x10 04:54:25 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 50) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1832.024026] ? dev_addr_mod+0x29e/0x350 [ 1832.024671] __tun_chr_ioctl+0x210b/0x3f80 [ 1832.025253] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1832.025894] ? __pfx___fget_files+0x10/0x10 [ 1832.026485] ? lock_acquire+0x32/0xc0 [ 1832.027051] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1832.027648] __x64_sys_ioctl+0x19e/0x210 [ 1832.028191] do_syscall_64+0x3f/0x90 [ 1832.028706] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1832.029391] RIP: 0033:0x7f59fcc15b19 [ 1832.029922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1832.032170] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1832.033160] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1832.034071] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1832.034983] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1832.035891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1832.036803] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1832.037766] [ 1832.102448] FAULT_INJECTION: forcing a failure. [ 1832.102448] name failslab, interval 1, probability 0, space 0, times 0 04:54:25 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 47) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1832.105250] CPU: 1 PID: 9872 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1832.106300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1832.107358] Call Trace: [ 1832.107697] [ 1832.108015] dump_stack_lvl+0x8f/0xb7 [ 1832.108545] should_fail_ex.cold+0x5/0xa [ 1832.109111] ? __kernfs_new_node+0xd4/0x8c0 [ 1832.109719] should_failslab+0x9/0x20 [ 1832.110245] kmem_cache_alloc+0x5a/0x410 [ 1832.110801] __kernfs_new_node+0xd4/0x8c0 [ 1832.111361] ? lock_release+0x3b6/0x750 [ 1832.111923] ? __pfx___kernfs_new_node+0x10/0x10 [ 1832.112566] ? __pfx_lock_release+0x10/0x10 [ 1832.113149] ? lock_acquire+0x32/0xc0 [ 1832.113694] ? up_write+0x1b0/0x520 [ 1832.114232] kernfs_new_node+0x97/0x120 [ 1832.114792] __kernfs_create_file+0x55/0x350 [ 1832.115400] sysfs_add_file_mode_ns+0x21c/0x440 [ 1832.116028] ? __pfx_dev_attr_store+0x10/0x10 [ 1832.116662] internal_create_group+0x322/0xb20 [ 1832.117303] ? __pfx_internal_create_group+0x10/0x10 [ 1832.117997] ? kernfs_add_one+0x17a/0x4f0 [ 1832.118569] ? kernfs_create_link+0x1bb/0x240 [ 1832.119177] internal_create_groups.part.0+0x90/0x140 [ 1832.119890] sysfs_create_groups+0x29/0x50 [ 1832.120455] device_add+0x711/0x1ec0 [ 1832.120980] ? __pfx_dev_set_name+0x10/0x10 [ 1832.121588] ? __pfx_device_add+0x10/0x10 [ 1832.122155] ? __init_waitqueue_head+0xca/0x150 [ 1832.122789] netdev_register_kobject+0x17e/0x3b0 [ 1832.123445] register_netdevice+0xd60/0x1530 [ 1832.124073] ? __pfx_register_netdevice+0x10/0x10 [ 1832.124722] ? dev_addr_mod+0x29e/0x350 [ 1832.125254] __tun_chr_ioctl+0x210b/0x3f80 [ 1832.125877] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1832.126492] ? lock_is_held_type+0xdb/0x130 [ 1832.127095] ? __pfx___fget_files+0x10/0x10 [ 1832.127668] ? lock_acquire+0x32/0xc0 [ 1832.128216] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1832.128820] __x64_sys_ioctl+0x19e/0x210 [ 1832.129380] do_syscall_64+0x3f/0x90 [ 1832.129924] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1832.130615] RIP: 0033:0x7ff461a5bb19 [ 1832.131103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1832.133417] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1832.134436] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1832.135345] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1832.136274] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1832.137185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1832.138134] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1832.139068] [ 1832.154855] Invalid ELF header magic: != ELF 04:54:25 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) [ 1832.230369] Invalid ELF header magic: != ELF 04:54:25 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 37) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:25 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 04:54:25 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7\n\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:54:25 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 49) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:25 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 51) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1832.439450] Invalid ELF header magic: != ELF 04:54:25 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) [ 1832.458923] FAULT_INJECTION: forcing a failure. [ 1832.458923] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.460149] CPU: 0 PID: 9905 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1832.460836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1832.461569] Call Trace: [ 1832.461809] [ 1832.462019] dump_stack_lvl+0x8f/0xb7 [ 1832.462375] should_fail_ex.cold+0x5/0xa [ 1832.462748] ? __kernfs_new_node+0xd4/0x8c0 [ 1832.463146] should_failslab+0x9/0x20 [ 1832.463496] kmem_cache_alloc+0x5a/0x410 [ 1832.463871] __kernfs_new_node+0xd4/0x8c0 [ 1832.464263] ? lock_release+0x3b6/0x750 [ 1832.464635] ? __pfx___kernfs_new_node+0x10/0x10 [ 1832.465080] ? __pfx_lock_release+0x10/0x10 [ 1832.465472] ? lock_acquire+0x32/0xc0 [ 1832.465850] ? up_write+0x1b0/0x520 [ 1832.466194] kernfs_new_node+0x97/0x120 [ 1832.466574] __kernfs_create_file+0x55/0x350 [ 1832.466982] sysfs_add_file_mode_ns+0x21c/0x440 [ 1832.467415] ? __pfx_dev_attr_store+0x10/0x10 [ 1832.467835] internal_create_group+0x322/0xb20 [ 1832.468268] ? __pfx_internal_create_group+0x10/0x10 [ 1832.468733] ? kernfs_add_one+0x17a/0x4f0 [ 1832.469123] ? kernfs_create_link+0x1bb/0x240 [ 1832.469544] internal_create_groups.part.0+0x90/0x140 [ 1832.470018] sysfs_create_groups+0x29/0x50 [ 1832.470405] device_add+0x711/0x1ec0 [ 1832.470755] ? __pfx_dev_set_name+0x10/0x10 [ 1832.471159] ? __pfx_device_add+0x10/0x10 [ 1832.471548] ? __init_waitqueue_head+0xca/0x150 [ 1832.471987] netdev_register_kobject+0x17e/0x3b0 [ 1832.472425] register_netdevice+0xd60/0x1530 [ 1832.472833] ? __pfx_register_netdevice+0x10/0x10 [ 1832.473273] ? dev_addr_mod+0x29e/0x350 [ 1832.473656] __tun_chr_ioctl+0x210b/0x3f80 [ 1832.474040] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1832.474445] ? __pfx___fget_files+0x10/0x10 [ 1832.474826] ? lock_acquire+0x32/0xc0 [ 1832.475186] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1832.475582] __x64_sys_ioctl+0x19e/0x210 [ 1832.475939] do_syscall_64+0x3f/0x90 [ 1832.476272] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1832.476732] RIP: 0033:0x7ff461a5bb19 [ 1832.477062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1832.478616] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1832.479290] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1832.479912] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1832.480498] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1832.481145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1832.481911] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1832.482767] [ 1832.484787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1832.486941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.487892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1832.488215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1832.509964] Invalid ELF header magic: != ELF 04:54:25 executing program 3: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @broadcast, @random="febeda10781f"}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1}}}}, 0x21) 04:54:25 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 48) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1832.544375] FAULT_INJECTION: forcing a failure. [ 1832.544375] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.546895] CPU: 1 PID: 9902 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1832.547929] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1832.548964] Call Trace: [ 1832.549309] [ 1832.549631] dump_stack_lvl+0x8f/0xb7 [ 1832.550188] should_fail_ex.cold+0x5/0xa [ 1832.550742] ? __kernfs_new_node+0xd4/0x8c0 [ 1832.551323] should_failslab+0x9/0x20 [ 1832.551875] kmem_cache_alloc+0x5a/0x410 [ 1832.552447] __kernfs_new_node+0xd4/0x8c0 [ 1832.553026] ? lock_release+0x3b6/0x750 [ 1832.553600] ? __pfx___kernfs_new_node+0x10/0x10 [ 1832.554234] ? __pfx_lock_release+0x10/0x10 [ 1832.554802] ? lock_acquire+0x32/0xc0 [ 1832.555356] ? up_write+0x1b0/0x520 [ 1832.555878] kernfs_new_node+0x97/0x120 [ 1832.556445] __kernfs_create_file+0x55/0x350 [ 1832.557056] sysfs_add_file_mode_ns+0x21c/0x440 [ 1832.557690] ? __pfx_dev_attr_store+0x10/0x10 [ 1832.558298] internal_create_group+0x322/0xb20 [ 1832.558940] ? __pfx_internal_create_group+0x10/0x10 [ 1832.559617] ? kernfs_add_one+0x17a/0x4f0 [ 1832.560193] ? kernfs_create_link+0x1bb/0x240 [ 1832.560805] internal_create_groups.part.0+0x90/0x140 [ 1832.561498] sysfs_create_groups+0x29/0x50 [ 1832.562087] device_add+0x711/0x1ec0 [ 1832.562599] ? __pfx_dev_set_name+0x10/0x10 [ 1832.563189] ? __pfx_device_add+0x10/0x10 [ 1832.563751] ? __init_waitqueue_head+0xca/0x150 [ 1832.564386] netdev_register_kobject+0x17e/0x3b0 [ 1832.565029] register_netdevice+0xd60/0x1530 [ 1832.565651] ? __pfx_register_netdevice+0x10/0x10 [ 1832.566054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1832.566301] ? dev_addr_mod+0x29e/0x350 [ 1832.567636] __tun_chr_ioctl+0x210b/0x3f80 [ 1832.568224] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1832.568838] ? __pfx___fget_files+0x10/0x10 [ 1832.569411] ? lock_acquire+0x32/0xc0 [ 1832.569968] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1832.570558] __x64_sys_ioctl+0x19e/0x210 [ 1832.571110] do_syscall_64+0x3f/0x90 [ 1832.571626] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1832.572299] RIP: 0033:0x7f2e2b599b19 [ 1832.572796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1832.575052] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1832.576021] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1832.576923] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1832.577824] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1832.578725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1832.579618] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1832.580554] 04:54:25 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) [ 1832.870067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:54:41 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 38) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:41 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:54:41 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x21) 04:54:41 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 04:54:41 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7%\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:54:41 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 52) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:41 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 49) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1848.433315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:54:41 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 50) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:41 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) [ 1848.530743] FAULT_INJECTION: forcing a failure. [ 1848.530743] name failslab, interval 1, probability 0, space 0, times 0 [ 1848.533264] CPU: 0 PID: 9932 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1848.534286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1848.535291] Call Trace: [ 1848.535629] [ 1848.535932] dump_stack_lvl+0x8f/0xb7 [ 1848.536444] should_fail_ex.cold+0x5/0xa [ 1848.536970] ? __kernfs_new_node+0xd4/0x8c0 [ 1848.537526] should_failslab+0x9/0x20 [ 1848.538057] kmem_cache_alloc+0x5a/0x410 [ 1848.538312] Invalid ELF header magic: != ELF [ 1848.538566] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1848.539911] __kernfs_new_node+0xd4/0x8c0 [ 1848.540455] ? mark_held_locks+0x9e/0xe0 [ 1848.541001] ? __pfx___kernfs_new_node+0x10/0x10 [ 1848.541631] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1848.542355] ? lockdep_hardirqs_on+0x7d/0x100 [ 1848.542966] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1848.543687] ? map_id_range_down+0x1c4/0x340 [ 1848.544286] kernfs_new_node+0x97/0x120 [ 1848.544842] __kernfs_create_file+0x55/0x350 [ 1848.545434] sysfs_add_file_mode_ns+0x21c/0x440 [ 1848.546079] ? __pfx_dev_attr_store+0x10/0x10 [ 1848.546702] internal_create_group+0x322/0xb20 [ 1848.547321] ? __pfx_internal_create_group+0x10/0x10 [ 1848.547988] ? kernfs_add_one+0x17a/0x4f0 [ 1848.548566] ? kernfs_create_link+0x1bb/0x240 [ 1848.549173] internal_create_groups.part.0+0x90/0x140 [ 1848.549870] sysfs_create_groups+0x29/0x50 [ 1848.550441] device_add+0x711/0x1ec0 [ 1848.550950] ? __pfx_dev_set_name+0x10/0x10 [ 1848.551541] ? __pfx_device_add+0x10/0x10 [ 1848.552102] ? __init_waitqueue_head+0xca/0x150 [ 1848.552737] netdev_register_kobject+0x17e/0x3b0 [ 1848.553385] register_netdevice+0xd60/0x1530 [ 1848.554018] ? __pfx_register_netdevice+0x10/0x10 [ 1848.554665] ? dev_addr_mod+0x29e/0x350 [ 1848.555194] __tun_chr_ioctl+0x210b/0x3f80 [ 1848.555770] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1848.556385] ? __pfx___fget_files+0x10/0x10 [ 1848.556956] ? lock_acquire+0x32/0xc0 [ 1848.557493] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1848.558099] __x64_sys_ioctl+0x19e/0x210 [ 1848.558654] do_syscall_64+0x3f/0x90 [ 1848.559170] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1848.559851] RIP: 0033:0x7f59fcc15b19 [ 1848.560341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1848.562600] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1848.563564] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1848.564455] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1848.565349] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1848.566260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1848.567157] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1848.568087] 04:54:41 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) [ 1848.689610] FAULT_INJECTION: forcing a failure. [ 1848.689610] name failslab, interval 1, probability 0, space 0, times 0 [ 1848.691651] CPU: 1 PID: 9930 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1848.692662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1848.693647] Call Trace: [ 1848.693997] [ 1848.694288] dump_stack_lvl+0x8f/0xb7 [ 1848.694799] should_fail_ex.cold+0x5/0xa [ 1848.695321] ? __kernfs_new_node+0xd4/0x8c0 [ 1848.695883] should_failslab+0x9/0x20 [ 1848.696378] kmem_cache_alloc+0x5a/0x410 [ 1848.696906] __kernfs_new_node+0xd4/0x8c0 [ 1848.697450] ? lock_release+0x3b6/0x750 [ 1848.697972] ? __pfx___kernfs_new_node+0x10/0x10 [ 1848.698572] ? __pfx_lock_release+0x10/0x10 [ 1848.699118] ? lock_acquire+0x32/0xc0 [ 1848.699632] ? up_write+0x1b0/0x520 [ 1848.700128] kernfs_new_node+0x97/0x120 [ 1848.700654] __kernfs_create_file+0x55/0x350 [ 1848.701226] sysfs_add_file_mode_ns+0x21c/0x440 [ 1848.701852] ? __pfx_dev_attr_store+0x10/0x10 [ 1848.702442] internal_create_group+0x322/0xb20 [ 1848.703042] ? __pfx_internal_create_group+0x10/0x10 [ 1848.703685] ? kernfs_add_one+0x17a/0x4f0 [ 1848.704236] ? kernfs_create_link+0x1bb/0x240 [ 1848.704815] internal_create_groups.part.0+0x90/0x140 [ 1848.705478] sysfs_create_groups+0x29/0x50 [ 1848.706039] device_add+0x711/0x1ec0 [ 1848.706532] ? __pfx_dev_set_name+0x10/0x10 [ 1848.707089] ? __pfx_device_add+0x10/0x10 [ 1848.707624] ? __init_waitqueue_head+0xca/0x150 [ 1848.708237] netdev_register_kobject+0x17e/0x3b0 [ 1848.708857] register_netdevice+0xd60/0x1530 [ 1848.709453] ? __pfx_register_netdevice+0x10/0x10 [ 1848.710085] ? dev_addr_mod+0x29e/0x350 [ 1848.710599] __tun_chr_ioctl+0x210b/0x3f80 [ 1848.711161] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1848.711745] ? __pfx___fget_files+0x10/0x10 [ 1848.712288] ? lock_acquire+0x32/0xc0 [ 1848.712807] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1848.713374] __x64_sys_ioctl+0x19e/0x210 [ 1848.713928] do_syscall_64+0x3f/0x90 [ 1848.714433] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1848.715088] RIP: 0033:0x7f2e2b599b19 [ 1848.715558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1848.717715] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1848.718649] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1848.719521] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1848.720381] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1848.721239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1848.722115] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1848.723011] 04:54:41 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) [ 1848.776606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1848.791457] FAULT_INJECTION: forcing a failure. [ 1848.791457] name failslab, interval 1, probability 0, space 0, times 0 [ 1848.793539] CPU: 0 PID: 9936 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1848.794554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1848.795557] Call Trace: [ 1848.795896] [ 1848.796196] dump_stack_lvl+0x8f/0xb7 [ 1848.796710] should_fail_ex.cold+0x5/0xa [ 1848.797253] ? __kernfs_new_node+0xd4/0x8c0 [ 1848.797826] should_failslab+0x9/0x20 [ 1848.798342] kmem_cache_alloc+0x5a/0x410 [ 1848.798886] __kernfs_new_node+0xd4/0x8c0 [ 1848.799445] ? lock_release+0x3b6/0x750 [ 1848.799971] ? __pfx___kernfs_new_node+0x10/0x10 [ 1848.800598] ? __pfx_lock_release+0x10/0x10 [ 1848.801148] ? lock_acquire+0x32/0xc0 [ 1848.801689] ? up_write+0x1b0/0x520 [ 1848.802209] kernfs_new_node+0x97/0x120 [ 1848.802750] __kernfs_create_file+0x55/0x350 [ 1848.803336] sysfs_add_file_mode_ns+0x21c/0x440 [ 1848.803952] ? __pfx_dev_attr_store+0x10/0x10 [ 1848.804543] internal_create_group+0x322/0xb20 [ 1848.805149] ? __pfx_internal_create_group+0x10/0x10 [ 1848.805804] ? kernfs_add_one+0x17a/0x4f0 [ 1848.806362] ? kernfs_create_link+0x1bb/0x240 [ 1848.806951] internal_create_groups.part.0+0x90/0x140 [ 1848.807616] sysfs_create_groups+0x29/0x50 [ 1848.808165] device_add+0x711/0x1ec0 [ 1848.808658] ? __pfx_dev_set_name+0x10/0x10 [ 1848.809223] ? __pfx_device_add+0x10/0x10 [ 1848.809777] ? __init_waitqueue_head+0xca/0x150 [ 1848.810400] netdev_register_kobject+0x17e/0x3b0 [ 1848.811031] register_netdevice+0xd60/0x1530 [ 1848.811624] ? __pfx_register_netdevice+0x10/0x10 [ 1848.812254] ? dev_addr_mod+0x29e/0x350 [ 1848.812777] __tun_chr_ioctl+0x210b/0x3f80 [ 1848.813339] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1848.813949] ? __pfx___fget_files+0x10/0x10 [ 1848.814504] ? lock_acquire+0x32/0xc0 [ 1848.815031] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1848.815603] __x64_sys_ioctl+0x19e/0x210 [ 1848.816144] do_syscall_64+0x3f/0x90 [ 1848.816642] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1848.817304] RIP: 0033:0x7ff461a5bb19 [ 1848.817799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1848.819966] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1848.820892] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1848.821778] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1848.822653] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1848.823517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1848.824387] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1848.825294] 04:54:42 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1}}}}, 0x21) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x3}, @broadcast, @random="6d4844764de6", @device_b, {0x5, 0x80}}, @a_msdu=[{@broadcast, @broadcast, 0x1000, "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"}]}, 0x1028) [ 1848.878660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:54:42 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 53) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:42 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00'}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 04:54:42 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7:\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:54:42 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 51) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:42 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 39) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:42 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r1 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r3, r2, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r4 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xe13}}, './file0\x00'}) [ 1849.151639] Invalid ELF header magic: != ELF [ 1849.186502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:54:56 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 50) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:56 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 54) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:56 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 40) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:56 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98\x05n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:54:56 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 04:54:56 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1}}}}, 0x21) syz_80211_inject_frame(&(0x7f0000001400)=@device_b, &(0x7f0000001440)=@ctrl_frame=@rts={{}, {0x1}, @device_b, @broadcast}, 0x10) syz_80211_inject_frame(&(0x7f0000001480), &(0x7f00000014c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x80}, @device_b, @initial, @device_a, {0x4, 0x2}}, {0x5, 0x0, 0x1}}, {@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xadb}, @from_mac=@device_b, @device_b, @from_mac=@broadcast, {0x7, 0x5}}, {0x1, 0x0, 0x1, 0x1, 0x81}}}, @ver_80211n={0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, @random="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"}, 0x2ef) syz_80211_inject_frame(&(0x7f0000001080), &(0x7f00000010c0)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @broadcast, @broadcast, @from_mac=@device_b, {0x3, 0x9}}, {0x6, 0x0, 0x1, 0x0, 0xd3}}, {@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x80}, @random="f24f60a3fe67", @device_b, @random="f14b7b9a661f", {0x4, 0x9}}, {0x0, 0x0, 0x3, 0x1, 0x1f}}}, @ver_80211n={0x0, 0x7, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @random="c6e49c79155067fd6f2e2fef32377ddca0aaa88cb7799ab1c429986b803b50d1f7665aefd452e6fbf39dc8f2685ddf163aaa2806f3bbaf70a1abe243aeb22325b9470da43838bf966202a2ea17cf5ad802476edbf872e5f15dc60706a01d095b4972d7c50008bac1931418fa2a382ef432477530869129016401ff926a3ec63bb52414bab9f7e9a626190fcd3cb0e082c66ec5d647b5d53418353854aa30b2d607f658e3b2fcd1d9b1c8fad4b52b2874d5695a3ada28ccc7775297db197554e84dde650a2a5ae160ffd0ae5c377dc2472240edbe7d6d87a875120654951696514ab28fddba7e09fa23052bc79cb92602edf9c21ca16c60d8bbbc489553f0b0d2f575812a6b1bc744f6f305df9b749f45540ff55a05c79f6354fa5df586b3f62fb79c7fbe7859900d51c4cba9ca580af8ea3dec2acdf3522a8d87207c2a46812a70e29f47f82232f904b7b11c451538b123d5654978803a9ab07db92f082bed75d116c730e453d61b1d311b4a15f3ff34c62e02ffeca7e868491f272c7ee0335cca536528fa1911aaa96ae692418c581f8fb2b98fa62fc9c5fa856df963e9eeeb592d809e0980dab13063ef1367d8bd6019a42227c6152fa24b2e840324d9395b9b5bd46d499cd85c89d70d426fd871642be4247b907ba9b78e3b2052e0a311f2b415baa9dc9ea6a017f2365e8cd6be53d80bf428a082a5e621e0fee4baec1aca0155b457ad678252243656afb5e6bcea1a108c0a45865659a535dda113025aeb69746974505a69d7939c7156ee2546e43693fdbf868553549d142b8a956e4068c711b85e7cb196009a861470232f492ab7c8db67a2f1754aede163e9a04f71fe95c04e7b9ae07daac9df6cec6785078e207aa37eaa7e059b44b59d9b8565c4f69a201ed752d2a2dc05111290895df76d06f25a59e4a989b2558bad944565b111669c57f1c865c52cc89d7084c9bec1f033c8087910ef71377838698f30703306d3f069222f81d6c2b76328af3b53ce6ba2"}, 0x309) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @from_mac=@device_b, @broadcast, @device_b, {0x9, 0x8f4}}, @a_msdu=[{@broadcast, @device_a, 0x1000, "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"}]}, 0x1028) 04:54:56 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 52) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:54:56 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r1 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r3, r2, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r4 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xe13}}, './file0\x00'}) [ 1862.940255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1862.942186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1862.950145] FAULT_INJECTION: forcing a failure. [ 1862.950145] name failslab, interval 1, probability 0, space 0, times 0 [ 1862.951030] CPU: 0 PID: 9985 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1862.951580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1862.952141] Call Trace: [ 1862.952327] [ 1862.952492] dump_stack_lvl+0x8f/0xb7 [ 1862.952782] should_fail_ex.cold+0x5/0xa [ 1862.953084] ? __kernfs_new_node+0xd4/0x8c0 [ 1862.953396] should_failslab+0x9/0x20 [ 1862.953678] kmem_cache_alloc+0x5a/0x410 [ 1862.953977] __kernfs_new_node+0xd4/0x8c0 [ 1862.954276] ? lock_release+0x3b6/0x750 [ 1862.954567] ? __pfx___kernfs_new_node+0x10/0x10 [ 1862.954903] ? __pfx_lock_release+0x10/0x10 [ 1862.955215] ? lock_acquire+0x32/0xc0 [ 1862.955502] ? up_write+0x1b0/0x520 [ 1862.955774] kernfs_new_node+0x97/0x120 [ 1862.956073] __kernfs_create_file+0x55/0x350 [ 1862.956390] sysfs_add_file_mode_ns+0x21c/0x440 [ 1862.956720] ? __pfx_dev_attr_store+0x10/0x10 [ 1862.957044] internal_create_group+0x322/0xb20 [ 1862.957374] ? __pfx_internal_create_group+0x10/0x10 [ 1862.957731] ? kernfs_add_one+0x17a/0x4f0 [ 1862.958062] ? kernfs_create_link+0x1bb/0x240 [ 1862.958377] internal_create_groups.part.0+0x90/0x140 [ 1862.958747] sysfs_create_groups+0x29/0x50 [ 1862.959052] device_add+0x711/0x1ec0 [ 1862.959321] ? __pfx_dev_set_name+0x10/0x10 [ 1862.959632] ? __pfx_device_add+0x10/0x10 [ 1862.959922] ? __init_waitqueue_head+0xca/0x150 [ 1862.960274] netdev_register_kobject+0x17e/0x3b0 [ 1862.960636] register_netdevice+0xd60/0x1530 [ 1862.960975] ? __pfx_register_netdevice+0x10/0x10 [ 1862.961338] ? dev_addr_mod+0x29e/0x350 [ 1862.961632] __tun_chr_ioctl+0x210b/0x3f80 [ 1862.961939] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1862.962281] ? __pfx___fget_files+0x10/0x10 [ 1862.962593] ? lock_acquire+0x32/0xc0 [ 1862.962897] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1862.963231] __x64_sys_ioctl+0x19e/0x210 [ 1862.963540] do_syscall_64+0x3f/0x90 [ 1862.963822] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1862.964207] RIP: 0033:0x7ff461a5bb19 [ 1862.964483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1862.965734] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1862.966279] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1862.966787] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1862.967287] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1862.967790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1862.968301] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1862.968819] [ 1862.971821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1862.980556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1862.991302] FAULT_INJECTION: forcing a failure. [ 1862.991302] name failslab, interval 1, probability 0, space 0, times 0 [ 1862.992222] CPU: 0 PID: 9981 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1862.992763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1862.993300] Call Trace: [ 1862.993481] [ 1862.993642] dump_stack_lvl+0x8f/0xb7 [ 1862.993930] should_fail_ex.cold+0x5/0xa [ 1862.994218] ? __kernfs_new_node+0xd4/0x8c0 [ 1862.994524] should_failslab+0x9/0x20 [ 1862.994798] kmem_cache_alloc+0x5a/0x410 [ 1862.995091] __kernfs_new_node+0xd4/0x8c0 [ 1862.995391] ? lock_release+0x3b6/0x750 [ 1862.995673] ? __pfx___kernfs_new_node+0x10/0x10 [ 1862.996004] ? __pfx_lock_release+0x10/0x10 [ 1862.996305] ? lock_acquire+0x32/0xc0 [ 1862.996592] ? up_write+0x1b0/0x520 [ 1862.996869] kernfs_new_node+0x97/0x120 [ 1862.997160] __kernfs_create_file+0x55/0x350 [ 1862.997468] sysfs_add_file_mode_ns+0x21c/0x440 [ 1862.997802] ? __pfx_dev_attr_store+0x10/0x10 [ 1862.998133] internal_create_group+0x322/0xb20 [ 1862.998464] ? __pfx_internal_create_group+0x10/0x10 [ 1862.998815] ? kernfs_add_one+0x17a/0x4f0 [ 1862.999119] ? kernfs_create_link+0x1bb/0x240 [ 1862.999455] internal_create_groups.part.0+0x90/0x140 [ 1862.999835] sysfs_create_groups+0x29/0x50 [ 1863.000150] device_add+0x711/0x1ec0 [ 1863.000428] ? __pfx_dev_set_name+0x10/0x10 [ 1863.000754] ? __pfx_device_add+0x10/0x10 [ 1863.001067] ? __init_waitqueue_head+0xca/0x150 [ 1863.001425] netdev_register_kobject+0x17e/0x3b0 [ 1863.001782] register_netdevice+0xd60/0x1530 [ 1863.002119] ? __pfx_register_netdevice+0x10/0x10 [ 1863.002472] ? dev_addr_mod+0x29e/0x350 [ 1863.002769] __tun_chr_ioctl+0x210b/0x3f80 [ 1863.003080] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1863.003409] ? __pfx___fget_files+0x10/0x10 [ 1863.003720] ? lock_acquire+0x32/0xc0 [ 1863.004020] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1863.004342] __x64_sys_ioctl+0x19e/0x210 [ 1863.004642] do_syscall_64+0x3f/0x90 [ 1863.004925] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1863.005302] RIP: 0033:0x7f2e2b599b19 [ 1863.005569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1863.006834] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1863.007365] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1863.007869] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1863.008372] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1863.008874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1863.009376] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1863.009886] [ 1863.024944] Invalid ELF header magic: != ELF [ 1863.073659] FAULT_INJECTION: forcing a failure. [ 1863.073659] name failslab, interval 1, probability 0, space 0, times 0 [ 1863.075973] CPU: 1 PID: 9987 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1863.077022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1863.078087] Call Trace: [ 1863.078436] [ 1863.078750] dump_stack_lvl+0x8f/0xb7 [ 1863.079298] should_fail_ex.cold+0x5/0xa [ 1863.079866] ? __kernfs_new_node+0xd4/0x8c0 [ 1863.080466] should_failslab+0x9/0x20 [ 1863.080993] kmem_cache_alloc+0x5a/0x410 [ 1863.081562] __kernfs_new_node+0xd4/0x8c0 [ 1863.082153] ? lock_release+0x3b6/0x750 [ 1863.082707] ? __pfx___kernfs_new_node+0x10/0x10 [ 1863.083357] ? __pfx_lock_release+0x10/0x10 [ 1863.083939] ? lock_acquire+0x32/0xc0 [ 1863.084538] ? up_write+0x1b0/0x520 [ 1863.085114] kernfs_new_node+0x97/0x120 [ 1863.085742] __kernfs_create_file+0x55/0x350 [ 1863.086431] sysfs_add_file_mode_ns+0x21c/0x440 [ 1863.087158] ? __pfx_dev_attr_store+0x10/0x10 [ 1863.087850] internal_create_group+0x322/0xb20 [ 1863.088567] ? __pfx_internal_create_group+0x10/0x10 [ 1863.089312] ? kernfs_add_one+0x17a/0x4f0 [ 1863.089969] ? kernfs_create_link+0x1bb/0x240 [ 1863.090648] internal_create_groups.part.0+0x90/0x140 [ 1863.091437] sysfs_create_groups+0x29/0x50 [ 1863.092083] device_add+0x711/0x1ec0 [ 1863.092659] ? __pfx_dev_set_name+0x10/0x10 [ 1863.093325] ? __pfx_device_add+0x10/0x10 [ 1863.093974] ? __init_waitqueue_head+0xca/0x150 [ 1863.094696] netdev_register_kobject+0x17e/0x3b0 [ 1863.095407] register_netdevice+0xd60/0x1530 [ 1863.096088] ? __pfx_register_netdevice+0x10/0x10 [ 1863.096816] ? dev_addr_mod+0x29e/0x350 [ 1863.097432] __tun_chr_ioctl+0x210b/0x3f80 [ 1863.098089] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1863.098776] ? __pfx___fget_files+0x10/0x10 [ 1863.099427] ? lock_acquire+0x32/0xc0 [ 1863.100050] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1863.100719] __x64_sys_ioctl+0x19e/0x210 [ 1863.101343] do_syscall_64+0x3f/0x90 [ 1863.101937] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1863.102729] RIP: 0033:0x7f59fcc15b19 [ 1863.103279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1863.105879] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1863.107002] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1863.107922] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1863.108822] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1863.109720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1863.110633] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1863.111550] [ 1863.288446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1863.291604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1863.295046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1863.297612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:55:09 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 55) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="f8ffffff00df00002e2f66696ce53000"]) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000040)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000100)=0x10) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x100, 0xd0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000000)=@ctrl_frame=@cf_end_cf_ack={{}, {0x5}, @device_b, @broadcast}, 0x10) 04:55:09 executing program 7: socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 04:55:09 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 41) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:09 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 53) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:09 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r1 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r3, r2, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r4 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xe13}}, './file0\x00'}) 04:55:09 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 51) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:09 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98$n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1876.433163] FAULT_INJECTION: forcing a failure. [ 1876.433163] name failslab, interval 1, probability 0, space 0, times 0 [ 1876.434423] CPU: 0 PID: 10009 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1876.435000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1876.435568] Call Trace: [ 1876.435757] [ 1876.435929] dump_stack_lvl+0x8f/0xb7 [ 1876.436238] should_fail_ex.cold+0x5/0xa [ 1876.436538] ? __kernfs_new_node+0xd4/0x8c0 [ 1876.436862] should_failslab+0x9/0x20 [ 1876.437156] kmem_cache_alloc+0x5a/0x410 [ 1876.437469] __kernfs_new_node+0xd4/0x8c0 [ 1876.437784] ? lock_release+0x3b6/0x750 [ 1876.438099] ? __pfx___kernfs_new_node+0x10/0x10 [ 1876.438453] ? __pfx_lock_release+0x10/0x10 [ 1876.438766] ? lock_acquire+0x32/0xc0 [ 1876.439063] ? up_write+0x1b0/0x520 [ 1876.439362] kernfs_new_node+0x97/0x120 [ 1876.439664] __kernfs_create_file+0x55/0x350 [ 1876.439988] sysfs_add_file_mode_ns+0x21c/0x440 [ 1876.440334] ? __pfx_dev_attr_store+0x10/0x10 [ 1876.440678] internal_create_group+0x322/0xb20 [ 1876.441028] ? __pfx_internal_create_group+0x10/0x10 [ 1876.441406] ? kernfs_add_one+0x17a/0x4f0 [ 1876.441714] ? kernfs_create_link+0x1bb/0x240 [ 1876.442050] internal_create_groups.part.0+0x90/0x140 [ 1876.442450] sysfs_create_groups+0x29/0x50 [ 1876.442757] device_add+0x711/0x1ec0 [ 1876.443035] ? lockdep_hardirqs_on+0x7d/0x100 [ 1876.443364] ? __pfx_device_add+0x10/0x10 [ 1876.443668] ? kobject_set_name_vargs+0x104/0x160 [ 1876.444033] netdev_register_kobject+0x17e/0x3b0 [ 1876.444383] register_netdevice+0xd60/0x1530 [ 1876.444716] ? __pfx_register_netdevice+0x10/0x10 [ 1876.445069] ? dev_addr_mod+0x29e/0x350 [ 1876.445360] __tun_chr_ioctl+0x210b/0x3f80 [ 1876.445675] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1876.446006] ? __pfx___fget_files+0x10/0x10 [ 1876.446335] ? lock_acquire+0x32/0xc0 [ 1876.446632] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1876.446971] __x64_sys_ioctl+0x19e/0x210 [ 1876.447274] do_syscall_64+0x3f/0x90 [ 1876.447562] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1876.447944] RIP: 0033:0x7f2e2b599b19 [ 1876.448214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1876.449455] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1876.450006] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1876.450518] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1876.451017] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1876.451531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1876.452030] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1876.452539] [ 1876.481645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1876.540005] Invalid ELF header magic: != ELF 04:55:09 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 56) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:09 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) [ 1876.573526] FAULT_INJECTION: forcing a failure. [ 1876.573526] name failslab, interval 1, probability 0, space 0, times 0 [ 1876.575492] CPU: 1 PID: 10011 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1876.576644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1876.577806] Call Trace: [ 1876.578221] [ 1876.578568] dump_stack_lvl+0x8f/0xb7 [ 1876.579176] should_fail_ex.cold+0x5/0xa [ 1876.579788] ? __kernfs_new_node+0xd4/0x8c0 [ 1876.580439] should_failslab+0x9/0x20 [ 1876.581033] kmem_cache_alloc+0x5a/0x410 [ 1876.581663] __kernfs_new_node+0xd4/0x8c0 [ 1876.582322] ? lock_release+0x3b6/0x750 [ 1876.582932] ? __pfx___kernfs_new_node+0x10/0x10 [ 1876.583637] ? __pfx_lock_release+0x10/0x10 [ 1876.584278] ? lock_acquire+0x32/0xc0 [ 1876.584893] ? up_write+0x1b0/0x520 [ 1876.585474] kernfs_new_node+0x97/0x120 [ 1876.586032] __kernfs_create_file+0x55/0x350 [ 1876.586650] sysfs_add_file_mode_ns+0x21c/0x440 [ 1876.587362] ? __pfx_dev_attr_store+0x10/0x10 [ 1876.588053] internal_create_group+0x322/0xb20 [ 1876.588770] ? __pfx_internal_create_group+0x10/0x10 [ 1876.589539] ? kernfs_add_one+0x17a/0x4f0 [ 1876.590217] ? kernfs_create_link+0x1bb/0x240 [ 1876.590896] internal_create_groups.part.0+0x90/0x140 [ 1876.591681] sysfs_create_groups+0x29/0x50 [ 1876.592337] device_add+0x711/0x1ec0 [ 1876.592932] ? __pfx_dev_set_name+0x10/0x10 [ 1876.593575] ? __pfx_device_add+0x10/0x10 [ 1876.594141] ? __init_waitqueue_head+0xca/0x150 [ 1876.594777] netdev_register_kobject+0x17e/0x3b0 [ 1876.595415] register_netdevice+0xd60/0x1530 [ 1876.596021] ? __pfx_register_netdevice+0x10/0x10 [ 1876.596664] ? dev_addr_mod+0x29e/0x350 [ 1876.597195] __tun_chr_ioctl+0x210b/0x3f80 [ 1876.597768] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1876.598402] ? __pfx___fget_files+0x10/0x10 [ 1876.598968] ? lock_acquire+0x32/0xc0 [ 1876.599512] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1876.600106] __x64_sys_ioctl+0x19e/0x210 [ 1876.600664] do_syscall_64+0x3f/0x90 [ 1876.601184] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1876.601922] RIP: 0033:0x7ff461a5bb19 [ 1876.602481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1876.605039] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1876.606221] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1876.607375] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1876.608541] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1876.609692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1876.610800] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1876.611695] [ 1876.672608] FAULT_INJECTION: forcing a failure. [ 1876.672608] name failslab, interval 1, probability 0, space 0, times 0 [ 1876.673631] CPU: 0 PID: 10024 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1876.674193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1876.674746] Call Trace: [ 1876.674925] [ 1876.675090] dump_stack_lvl+0x8f/0xb7 [ 1876.675371] should_fail_ex.cold+0x5/0xa [ 1876.675662] ? __kernfs_new_node+0xd4/0x8c0 [ 1876.675970] should_failslab+0x9/0x20 [ 1876.676247] kmem_cache_alloc+0x5a/0x410 [ 1876.676539] __kernfs_new_node+0xd4/0x8c0 [ 1876.676846] ? lock_release+0x3b6/0x750 [ 1876.677129] ? __pfx___kernfs_new_node+0x10/0x10 [ 1876.677457] ? __pfx_lock_release+0x10/0x10 [ 1876.677760] ? lock_acquire+0x32/0xc0 [ 1876.678035] ? lock_is_held_type+0xdb/0x130 [ 1876.678344] ? find_held_lock+0x2c/0x110 [ 1876.678632] ? lock_release+0x3b6/0x750 [ 1876.678911] ? sysfs_do_create_link_sd+0x82/0x140 [ 1876.679268] kernfs_new_node+0x97/0x120 [ 1876.679564] kernfs_create_link+0xcf/0x240 [ 1876.679864] sysfs_do_create_link_sd+0x90/0x140 [ 1876.680197] sysfs_create_link+0x63/0xc0 [ 1876.680491] device_add+0x676/0x1ec0 [ 1876.680760] ? __pfx_dev_set_name+0x10/0x10 [ 1876.681076] ? __pfx_device_add+0x10/0x10 [ 1876.681357] ? __init_waitqueue_head+0xca/0x150 [ 1876.681687] netdev_register_kobject+0x17e/0x3b0 [ 1876.682045] register_netdevice+0xd60/0x1530 [ 1876.682360] ? __pfx_register_netdevice+0x10/0x10 [ 1876.682723] ? dev_addr_mod+0x29e/0x350 [ 1876.683019] __tun_chr_ioctl+0x210b/0x3f80 [ 1876.683343] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1876.683693] ? __pfx___fget_files+0x10/0x10 [ 1876.684018] ? lock_acquire+0x32/0xc0 [ 1876.684324] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1876.684660] __x64_sys_ioctl+0x19e/0x210 [ 1876.684973] do_syscall_64+0x3f/0x90 [ 1876.685259] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1876.685597] RIP: 0033:0x7f2e2b599b19 [ 1876.685867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1876.686974] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1876.687522] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1876.688046] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1876.688553] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1876.689064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1876.689572] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1876.690115] 04:55:09 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 42) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1876.716631] Invalid ELF header magic: != ELF 04:55:09 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:55:10 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 57) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:10 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 52) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:10 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 04:55:10 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 54) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1876.840492] FAULT_INJECTION: forcing a failure. [ 1876.840492] name failslab, interval 1, probability 0, space 0, times 0 [ 1876.841848] CPU: 0 PID: 10038 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1876.842398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1876.842936] Call Trace: [ 1876.843121] [ 1876.843283] dump_stack_lvl+0x8f/0xb7 [ 1876.843569] should_fail_ex.cold+0x5/0xa [ 1876.843865] ? __kernfs_new_node+0xd4/0x8c0 [ 1876.844170] should_failslab+0x9/0x20 [ 1876.844436] kmem_cache_alloc+0x5a/0x410 [ 1876.844735] __kernfs_new_node+0xd4/0x8c0 [ 1876.845031] ? lock_release+0x3b6/0x750 [ 1876.845318] ? __pfx___kernfs_new_node+0x10/0x10 [ 1876.845650] ? __pfx_lock_release+0x10/0x10 [ 1876.845954] ? lock_acquire+0x32/0xc0 [ 1876.846288] ? up_write+0x1b0/0x520 [ 1876.846566] kernfs_new_node+0x97/0x120 [ 1876.846860] __kernfs_create_file+0x55/0x350 [ 1876.847171] sysfs_add_file_mode_ns+0x21c/0x440 [ 1876.847497] ? __pfx_dev_attr_store+0x10/0x10 [ 1876.847823] internal_create_group+0x322/0xb20 [ 1876.848155] ? __pfx_internal_create_group+0x10/0x10 [ 1876.848503] ? kernfs_add_one+0x17a/0x4f0 [ 1876.848807] ? kernfs_create_link+0x1bb/0x240 [ 1876.849126] internal_create_groups.part.0+0x90/0x140 [ 1876.849484] sysfs_create_groups+0x29/0x50 [ 1876.849806] device_add+0x711/0x1ec0 [ 1876.850088] ? __pfx_dev_set_name+0x10/0x10 [ 1876.850414] ? __pfx_device_add+0x10/0x10 [ 1876.850724] ? __init_waitqueue_head+0xca/0x150 [ 1876.851097] netdev_register_kobject+0x17e/0x3b0 [ 1876.851469] register_netdevice+0xd60/0x1530 [ 1876.851802] ? __pfx_register_netdevice+0x10/0x10 [ 1876.852158] ? dev_addr_mod+0x29e/0x350 [ 1876.852456] __tun_chr_ioctl+0x210b/0x3f80 [ 1876.852781] ? exc_segment_not_present+0x1a/0x50 [ 1876.853127] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1876.853488] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1876.853825] __x64_sys_ioctl+0x19e/0x210 [ 1876.854135] do_syscall_64+0x3f/0x90 [ 1876.854423] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1876.854804] RIP: 0033:0x7f2e2b599b19 [ 1876.855091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1876.856332] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1876.856877] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1876.857376] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1876.857870] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1876.858413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1876.858914] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1876.859456] 04:55:10 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98:n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:55:10 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x100, 0x70bd2a, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x404c1a4) syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1}}}}, 0x21) [ 1876.907146] FAULT_INJECTION: forcing a failure. [ 1876.907146] name failslab, interval 1, probability 0, space 0, times 0 [ 1876.908201] CPU: 0 PID: 10039 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1876.908751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1876.909292] Call Trace: [ 1876.909471] [ 1876.909637] dump_stack_lvl+0x8f/0xb7 [ 1876.909916] should_fail_ex.cold+0x5/0xa [ 1876.910227] ? __kernfs_new_node+0xd4/0x8c0 [ 1876.910532] should_failslab+0x9/0x20 [ 1876.910806] kmem_cache_alloc+0x5a/0x410 [ 1876.911097] __kernfs_new_node+0xd4/0x8c0 [ 1876.911389] ? lock_release+0x3b6/0x750 [ 1876.911670] ? __pfx___kernfs_new_node+0x10/0x10 [ 1876.912003] ? __pfx_lock_release+0x10/0x10 [ 1876.912293] ? lock_acquire+0x32/0xc0 [ 1876.912576] ? up_write+0x1b0/0x520 [ 1876.912835] kernfs_new_node+0x97/0x120 [ 1876.913124] __kernfs_create_file+0x55/0x350 [ 1876.913436] sysfs_add_file_mode_ns+0x21c/0x440 [ 1876.913763] ? __pfx_dev_attr_store+0x10/0x10 [ 1876.914088] internal_create_group+0x322/0xb20 [ 1876.914422] ? __pfx_internal_create_group+0x10/0x10 [ 1876.914775] ? kernfs_add_one+0x17a/0x4f0 [ 1876.915075] ? kernfs_create_link+0x1bb/0x240 [ 1876.915373] internal_create_groups.part.0+0x90/0x140 [ 1876.915738] sysfs_create_groups+0x29/0x50 [ 1876.916022] device_add+0x711/0x1ec0 [ 1876.916297] ? __pfx_dev_set_name+0x10/0x10 [ 1876.916622] ? __pfx_device_add+0x10/0x10 [ 1876.916926] ? __init_waitqueue_head+0xca/0x150 [ 1876.917273] netdev_register_kobject+0x17e/0x3b0 [ 1876.917631] register_netdevice+0xd60/0x1530 [ 1876.917961] ? __pfx_register_netdevice+0x10/0x10 [ 1876.918296] ? dev_addr_mod+0x29e/0x350 [ 1876.918595] __tun_chr_ioctl+0x210b/0x3f80 [ 1876.918914] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1876.919253] ? __pfx___fget_files+0x10/0x10 [ 1876.919535] ? lock_acquire+0x32/0xc0 [ 1876.919840] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1876.920135] __x64_sys_ioctl+0x19e/0x210 [ 1876.920440] do_syscall_64+0x3f/0x90 [ 1876.920697] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1876.921080] RIP: 0033:0x7fcb82d36b19 [ 1876.921322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1876.922574] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1876.923103] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1876.923604] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1876.924101] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1876.924596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1876.925095] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1876.925610] [ 1876.958289] FAULT_INJECTION: forcing a failure. [ 1876.958289] name failslab, interval 1, probability 0, space 0, times 0 [ 1876.960408] CPU: 1 PID: 10040 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1876.961438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1876.962455] Call Trace: [ 1876.962792] [ 1876.963091] dump_stack_lvl+0x8f/0xb7 [ 1876.963607] should_fail_ex.cold+0x5/0xa [ 1876.964144] ? __kernfs_new_node+0xd4/0x8c0 [ 1876.964709] should_failslab+0x9/0x20 [ 1876.965221] kmem_cache_alloc+0x5a/0x410 [ 1876.965758] __kernfs_new_node+0xd4/0x8c0 [ 1876.966328] ? lock_release+0x3b6/0x750 [ 1876.966855] ? __pfx___kernfs_new_node+0x10/0x10 [ 1876.967470] ? __pfx_lock_release+0x10/0x10 [ 1876.968020] ? lock_acquire+0x32/0xc0 [ 1876.968533] ? up_write+0x1b0/0x520 [ 1876.969048] kernfs_new_node+0x97/0x120 [ 1876.969592] __kernfs_create_file+0x55/0x350 [ 1876.970187] sysfs_add_file_mode_ns+0x21c/0x440 [ 1876.970792] ? __pfx_dev_attr_store+0x10/0x10 [ 1876.971402] internal_create_group+0x322/0xb20 [ 1876.972011] ? __pfx_internal_create_group+0x10/0x10 [ 1876.972657] ? kernfs_add_one+0x17a/0x4f0 [ 1876.973204] ? kernfs_create_link+0x1bb/0x240 [ 1876.973811] internal_create_groups.part.0+0x90/0x140 [ 1876.974488] sysfs_create_groups+0x29/0x50 [ 1876.975037] device_add+0x711/0x1ec0 [ 1876.975527] ? __pfx_dev_set_name+0x10/0x10 [ 1876.976088] ? __pfx_device_add+0x10/0x10 [ 1876.976625] ? __init_waitqueue_head+0xca/0x150 [ 1876.977233] netdev_register_kobject+0x17e/0x3b0 [ 1876.977853] register_netdevice+0xd60/0x1530 [ 1876.978464] ? __pfx_register_netdevice+0x10/0x10 [ 1876.979090] ? dev_addr_mod+0x29e/0x350 [ 1876.979637] __tun_chr_ioctl+0x210b/0x3f80 [ 1876.980191] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1876.980785] ? __pfx___fget_files+0x10/0x10 [ 1876.981340] ? lock_acquire+0x32/0xc0 [ 1876.981865] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1876.982444] __x64_sys_ioctl+0x19e/0x210 [ 1876.982972] do_syscall_64+0x3f/0x90 [ 1876.983470] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1876.984121] RIP: 0033:0x7f59fcc15b19 [ 1876.984592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1876.986750] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1876.987667] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1876.988521] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1876.989378] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1876.990261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1876.991118] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1876.991724] Invalid ELF header magic: != ELF [ 1876.991993] [ 1877.002592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1877.049174] FAULT_INJECTION: forcing a failure. [ 1877.049174] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.050275] CPU: 0 PID: 10042 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1877.050818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1877.051362] Call Trace: [ 1877.051548] [ 1877.051713] dump_stack_lvl+0x8f/0xb7 [ 1877.051994] should_fail_ex.cold+0x5/0xa [ 1877.052287] ? kstrdup_const+0x57/0x80 [ 1877.052560] should_failslab+0x9/0x20 [ 1877.052832] __kmem_cache_alloc_node+0x5b/0x400 [ 1877.053160] ? kstrdup_const+0x57/0x80 [ 1877.053436] ? kstrdup_const+0x57/0x80 [ 1877.053708] __kmalloc_node_track_caller+0x43/0xb0 [ 1877.054074] kstrdup+0x3f/0x80 [ 1877.054326] kstrdup_const+0x57/0x80 [ 1877.054588] __kernfs_new_node+0x9d/0x8c0 [ 1877.054888] ? lock_release+0x3b6/0x750 [ 1877.055174] ? __pfx___kernfs_new_node+0x10/0x10 [ 1877.055508] ? __pfx_lock_release+0x10/0x10 [ 1877.055805] ? lock_acquire+0x32/0xc0 [ 1877.056078] ? lock_is_held_type+0xdb/0x130 [ 1877.056385] ? find_held_lock+0x2c/0x110 [ 1877.056690] ? lock_release+0x3b6/0x750 [ 1877.056970] ? sysfs_do_create_link_sd+0x82/0x140 [ 1877.057339] kernfs_new_node+0x97/0x120 [ 1877.057633] kernfs_create_link+0xcf/0x240 [ 1877.057950] sysfs_do_create_link_sd+0x90/0x140 [ 1877.058312] sysfs_create_link+0x63/0xc0 [ 1877.058619] device_add+0x676/0x1ec0 [ 1877.058909] ? __pfx_dev_set_name+0x10/0x10 [ 1877.059240] ? __pfx_device_add+0x10/0x10 [ 1877.059556] ? __init_waitqueue_head+0xca/0x150 [ 1877.059916] netdev_register_kobject+0x17e/0x3b0 [ 1877.060279] register_netdevice+0xd60/0x1530 [ 1877.060626] ? __pfx_register_netdevice+0x10/0x10 [ 1877.060992] ? dev_addr_mod+0x29e/0x350 [ 1877.061288] __tun_chr_ioctl+0x210b/0x3f80 [ 1877.061608] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1877.061952] ? __pfx___fget_files+0x10/0x10 [ 1877.062279] ? lock_acquire+0x32/0xc0 [ 1877.062580] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1877.062911] __x64_sys_ioctl+0x19e/0x210 [ 1877.063219] do_syscall_64+0x3f/0x90 [ 1877.063504] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1877.063896] RIP: 0033:0x7ff461a5bb19 [ 1877.064172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1877.065441] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1877.065980] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1877.066503] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1877.067005] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1877.067511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1877.068012] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1877.068537] 04:55:10 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 53) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:10 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) [ 1877.307367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1889.629615] Invalid ELF header magic: != ELF 04:55:22 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1}}}}, 0x21) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x7c3) 04:55:22 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 58) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1889.651531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:55:22 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 54) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:22 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 43) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:22 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 55) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:22 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 04:55:22 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%\n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:55:22 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:55:22 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%%\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1889.687283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:55:22 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) [ 1889.753550] Invalid ELF header magic: != ELF [ 1889.778299] FAULT_INJECTION: forcing a failure. [ 1889.778299] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.780126] CPU: 1 PID: 10075 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1889.780926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1889.781718] Call Trace: [ 1889.781980] [ 1889.782210] dump_stack_lvl+0x8f/0xb7 [ 1889.782633] should_fail_ex.cold+0x5/0xa [ 1889.783047] ? __kernfs_new_node+0xd4/0x8c0 [ 1889.783481] should_failslab+0x9/0x20 [ 1889.783871] kmem_cache_alloc+0x5a/0x410 [ 1889.784287] __kernfs_new_node+0xd4/0x8c0 [ 1889.784703] ? lock_release+0x3b6/0x750 [ 1889.785122] ? __pfx___kernfs_new_node+0x10/0x10 [ 1889.785589] ? __pfx_lock_release+0x10/0x10 [ 1889.786015] ? lock_acquire+0x32/0xc0 [ 1889.786439] ? up_write+0x1b0/0x520 [ 1889.786823] kernfs_new_node+0x97/0x120 [ 1889.787236] __kernfs_create_file+0x55/0x350 [ 1889.787639] sysfs_add_file_mode_ns+0x21c/0x440 [ 1889.787976] ? __pfx_dev_attr_store+0x10/0x10 [ 1889.788304] internal_create_group+0x322/0xb20 [ 1889.788640] ? __pfx_internal_create_group+0x10/0x10 [ 1889.788999] ? kernfs_add_one+0x17a/0x4f0 [ 1889.789304] ? kernfs_create_link+0x1bb/0x240 [ 1889.789630] internal_create_groups.part.0+0x90/0x140 [ 1889.789994] sysfs_create_groups+0x29/0x50 [ 1889.790310] device_add+0x711/0x1ec0 [ 1889.790585] ? __pfx_dev_set_name+0x10/0x10 [ 1889.790908] ? __pfx_device_add+0x10/0x10 [ 1889.791218] ? __init_waitqueue_head+0xca/0x150 [ 1889.791573] netdev_register_kobject+0x17e/0x3b0 [ 1889.791920] register_netdevice+0xd60/0x1530 [ 1889.792240] ? __pfx_register_netdevice+0x10/0x10 [ 1889.792594] ? dev_addr_mod+0x29e/0x350 [ 1889.792874] __tun_chr_ioctl+0x210b/0x3f80 [ 1889.793184] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1889.793523] ? __pfx___fget_files+0x10/0x10 [ 1889.793828] ? lock_acquire+0x32/0xc0 [ 1889.794120] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1889.794435] __x64_sys_ioctl+0x19e/0x210 [ 1889.794734] do_syscall_64+0x3f/0x90 [ 1889.795008] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1889.795392] RIP: 0033:0x7f2e2b599b19 [ 1889.795662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1889.796842] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1889.797348] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1889.797824] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1889.798309] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1889.798779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1889.799252] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1889.799740] [ 1889.815654] FAULT_INJECTION: forcing a failure. [ 1889.815654] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.818156] CPU: 1 PID: 10074 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1889.818711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1889.819251] Call Trace: [ 1889.819432] [ 1889.819603] dump_stack_lvl+0x8f/0xb7 [ 1889.819885] should_fail_ex.cold+0x5/0xa [ 1889.820167] ? __kernfs_new_node+0xd4/0x8c0 [ 1889.820471] should_failslab+0x9/0x20 [ 1889.820743] kmem_cache_alloc+0x5a/0x410 [ 1889.821035] __kernfs_new_node+0xd4/0x8c0 [ 1889.821326] ? lock_release+0x3b6/0x750 [ 1889.821607] ? __pfx___kernfs_new_node+0x10/0x10 [ 1889.821940] ? __pfx_lock_release+0x10/0x10 [ 1889.822247] ? lock_acquire+0x32/0xc0 [ 1889.822542] ? up_write+0x1b0/0x520 [ 1889.822813] kernfs_new_node+0x97/0x120 [ 1889.823106] __kernfs_create_file+0x55/0x350 [ 1889.823417] sysfs_add_file_mode_ns+0x21c/0x440 [ 1889.823745] ? __pfx_dev_attr_store+0x10/0x10 [ 1889.824067] internal_create_group+0x322/0xb20 [ 1889.824399] ? __pfx_internal_create_group+0x10/0x10 [ 1889.824750] ? kernfs_add_one+0x17a/0x4f0 [ 1889.825049] ? kernfs_create_link+0x1bb/0x240 [ 1889.825369] internal_create_groups.part.0+0x90/0x140 [ 1889.825750] sysfs_create_groups+0x29/0x50 [ 1889.826051] device_add+0x711/0x1ec0 [ 1889.826330] ? __pfx_dev_set_name+0x10/0x10 [ 1889.826645] ? __pfx_device_add+0x10/0x10 [ 1889.826938] ? __init_waitqueue_head+0xca/0x150 [ 1889.827269] netdev_register_kobject+0x17e/0x3b0 [ 1889.827612] register_netdevice+0xd60/0x1530 [ 1889.827932] ? __pfx_register_netdevice+0x10/0x10 [ 1889.828271] ? dev_addr_mod+0x29e/0x350 [ 1889.828551] __tun_chr_ioctl+0x210b/0x3f80 [ 1889.828873] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1889.829193] ? __pfx___fget_files+0x10/0x10 [ 1889.829490] ? lock_acquire+0x32/0xc0 [ 1889.829777] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1889.830090] __x64_sys_ioctl+0x19e/0x210 [ 1889.830380] do_syscall_64+0x3f/0x90 [ 1889.830664] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1889.831026] RIP: 0033:0x7ff461a5bb19 [ 1889.831296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1889.832472] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1889.832977] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1889.833450] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1889.833925] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1889.834408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1889.834879] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1889.835371] [ 1889.861606] FAULT_INJECTION: forcing a failure. [ 1889.861606] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.863340] CPU: 1 PID: 10079 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1889.863890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1889.864425] Call Trace: [ 1889.864605] [ 1889.864768] dump_stack_lvl+0x8f/0xb7 [ 1889.865044] should_fail_ex.cold+0x5/0xa [ 1889.865325] ? __kernfs_new_node+0xd4/0x8c0 [ 1889.865627] should_failslab+0x9/0x20 [ 1889.865894] kmem_cache_alloc+0x5a/0x410 [ 1889.866199] __kernfs_new_node+0xd4/0x8c0 [ 1889.866503] ? lock_release+0x3b6/0x750 [ 1889.866791] ? __pfx___kernfs_new_node+0x10/0x10 [ 1889.867119] ? __pfx_lock_release+0x10/0x10 [ 1889.867421] ? lock_acquire+0x32/0xc0 [ 1889.867704] ? up_write+0x1b0/0x520 [ 1889.867973] kernfs_new_node+0x97/0x120 [ 1889.868263] __kernfs_create_file+0x55/0x350 [ 1889.868572] sysfs_add_file_mode_ns+0x21c/0x440 [ 1889.868916] ? __pfx_dev_attr_store+0x10/0x10 [ 1889.869239] internal_create_group+0x322/0xb20 [ 1889.869566] ? __pfx_internal_create_group+0x10/0x10 [ 1889.869917] ? kernfs_add_one+0x17a/0x4f0 [ 1889.870248] ? kernfs_create_link+0x1bb/0x240 [ 1889.870565] internal_create_groups.part.0+0x90/0x140 [ 1889.870925] sysfs_create_groups+0x29/0x50 [ 1889.871222] device_add+0x711/0x1ec0 [ 1889.871491] ? __pfx_dev_set_name+0x10/0x10 [ 1889.871801] ? __pfx_device_add+0x10/0x10 [ 1889.872093] ? __init_waitqueue_head+0xca/0x150 [ 1889.872428] netdev_register_kobject+0x17e/0x3b0 [ 1889.872766] register_netdevice+0xd60/0x1530 [ 1889.873083] ? __pfx_register_netdevice+0x10/0x10 [ 1889.873438] ? dev_addr_mod+0x29e/0x350 [ 1889.873719] __tun_chr_ioctl+0x210b/0x3f80 [ 1889.874029] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1889.874347] ? lock_is_held_type+0xdb/0x130 [ 1889.874650] ? __pfx___fget_files+0x10/0x10 [ 1889.874946] ? lock_acquire+0x32/0xc0 [ 1889.875232] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1889.875541] __x64_sys_ioctl+0x19e/0x210 [ 1889.875829] do_syscall_64+0x3f/0x90 [ 1889.876100] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1889.876451] RIP: 0033:0x7fcb82d36b19 [ 1889.876711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1889.877887] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1889.878427] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1889.878930] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1889.879426] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1889.879920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1889.880421] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1889.880934] 04:55:23 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2}) [ 1889.940799] Invalid ELF header magic: != ELF 04:55:23 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 59) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1890.008212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:55:36 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5:\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:55:36 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 60) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:36 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000000280)=@mgmt_frame=@auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x82}, @device_b, @device_b, @from_mac=@broadcast, {0x8, 0x4}}, 0x0, 0x3, 0x69, @val={0x10, 0x1, 0x3d}, [{0xdd, 0x9d, "917e9d31467916658992fa58d3e7a49c8ec8bed9a75bb8df132882fd3f4b4c359d2b94c8a4ca98855f1710a45e2bb1f24662cccd8401b073939d46d8eb50b0592ff0fd1c37cb2bbda007645bf52a4768ec79c40642d882eb86165aa0263faca629fe8e98fb371d8e373bc719bcc205bf45ebed7b413d5534bf1b043bdb890e8c439a0713ada9153ff7915bb12297a9f793ed484eb02618ee48d17ff8b9"}, {0xdd, 0x46, "db2a58ac40eb89a6786a0fe910e7d4c2a0e40cdcfe138a42494001177ea594a002aa1387b5326f0b50c91d9263dd659615b43efe0deb9af1b5278278880757f0386d6da9fe75"}]}, 0x108) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_a, @initial, {0x2, 0x4}}, 0xfffe, 0x1, 0x55, @void, [{0xdd, 0x31, "a0beb8bb388a895167b5f828fa919820da3440bb77aa9572b08f47687e489039a5a41fe2020dfa99224ca2a473b821e58c"}, {0xdd, 0xc2, "7f31cc9e2455472a1b55613aa0f16606e06fd175c1d716a65a034c4fb564031f196b9f24f5e40deb549ded8fbf2782184c61cc1225d785c021eab31a27b5e2e918e3cd76a576cc54d9f7f50b28fa77e3615ebba48d36aafdd84bbd032e116a794318331e255c8caf3086e4f749c0c1e6a560464bfda78f423ebdcef4765f4b5d48e5936a4862a3713356cd592b8f414f85ee1f7734cbc0b093f5028c8cfcd6ce9ca7ce93b2c13520d27321e7a277b70857ed00"/194}, {0xdd, 0x17, "f433a60000010000000000f401807bf5c632ab3b9a29db"}, {0xdd, 0xed, "12cc0646e2643d3d857e527e14fa48718aa14fbdedac29c4c7477120e85a541f132fe9aa89261657048a6339585f48b85aef98e7acfb2e178d7ac2c25e7376cf1a2e3b103404d13af7a9d515c7a14c370df959d12d28950cf7bb5855e22eb7be18109074bd8be320758f526256807f5d053e0c36b502d3ee0fdc6c2ea0189651d6a8a0a4b27c53fdcf9b55e629c59fc03cbb94e92f1a96a9a15ebd7675a97b7b42fe865f88925083747797ca9180e3b5a0343ace1dd0f1fef35aa431357919bad91086306a5d6782a96c4439da0e4bc32aa463c6298aaa6fa05bb45c693da8f29af0d29090ab84dbfff41149e6"}]}, 0x21d) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1f}, @device_b, @device_a, @random="a42ee8af45e8", {0x6, 0x6}}, 0x40, 0x59, @default, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x7, 0x0, {0x5, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x300, 0x9, 0x20}}, [{0xdd, 0x95, "8c21b60f5b2625be0e5fdf0cbe87a6fe741899dd1472a77a3bc8f55c71b7425618ecb17650a299b772dbad15a0679acec5497ed17c352a536a03fb5ace7452d340b6c7e96f02d51719d2f1aaf1a162f99fe7a9bb5473efce96e6e12fe0118fde76469fc868acc01aebb716ede6ab7a4805899ef22bb266c21ffc321b8960f1d3b7f2fea324a223edc0e0d5146da0a2cb646b2f8ba8"}, {0xdd, 0x20, "eb8b038889b94778683d84face97172ff813e623d8aa28f0748d47fefb455172"}, {0xdd, 0x77, "e98fb4c9871c69b083b09351f015bb502eb02634be81a0158616c1fd448c105febe982468eb20d1ed341073a0bf7aae75478e2d5c5865ddb540c1bc4042df603aad35382b56ee457b6df1fc7ef5f0d6a62799ae86ec810236783efc36b96faaf8f66ed77a31aace4c49bb5790cd530f23dc45d31075d5b"}, {0xdd, 0x1c, "d6b9f357991b5abbca652966c1809c5fb470f16d27c5001a145f404e"}, {0xdd, 0xd4, "1e2f1dda52f45bff36353c6a0c4c91befb4b044a80b97e8a2673ffd72d266cb8b6b07e4013a4ee41e0c2d6d3f546752798a31d75ac30e407de2945fdafb60588e66de324043e8669b46f4bb5531a9d9f96f82835724f68681f9e6e867676281feb84be99a8811a3d14101795997202c476a6c788b8a7bfbcd6de5a2a51c63846d45ef583030e2358c5e88390faf7bfcc2da0e3d5bd5837fc062ee4df5a1f63ccee77cbc4b02593969a61a7ab7eb9d66335803ce441848a3125c0afc65bc8fde0da489f548f56ceec94eb3e5079a2ccda1ac9716f"}]}, 0x260) syz_80211_inject_frame(&(0x7f0000000680)=@broadcast, &(0x7f00000006c0)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8}, @broadcast, @device_a, @initial, {0xc, 0xff}}, 0x12, @void}, 0x1a) 04:55:36 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 44) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:36 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2}) 04:55:36 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 56) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:36 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 55) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:36 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), 0x0, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) [ 1902.839588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1902.856111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1902.859149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1902.867307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:55:36 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2}) [ 1902.894271] FAULT_INJECTION: forcing a failure. [ 1902.894271] name failslab, interval 1, probability 0, space 0, times 0 [ 1902.895517] CPU: 1 PID: 10109 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1902.896110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1902.896702] Call Trace: [ 1902.896890] [ 1902.897061] dump_stack_lvl+0x8f/0xb7 [ 1902.897352] should_fail_ex.cold+0x5/0xa [ 1902.897655] ? __kernfs_new_node+0xd4/0x8c0 [ 1902.897982] should_failslab+0x9/0x20 [ 1902.898276] kmem_cache_alloc+0x5a/0x410 [ 1902.898588] __kernfs_new_node+0xd4/0x8c0 [ 1902.898899] ? lock_release+0x3b6/0x750 [ 1902.899196] ? __pfx___kernfs_new_node+0x10/0x10 [ 1902.899542] ? __pfx_lock_release+0x10/0x10 [ 1902.899856] ? lock_acquire+0x32/0xc0 [ 1902.900148] ? up_write+0x1b0/0x520 [ 1902.900430] kernfs_new_node+0x97/0x120 [ 1902.900734] __kernfs_create_file+0x55/0x350 [ 1902.901062] sysfs_add_file_mode_ns+0x21c/0x440 [ 1902.901401] ? __pfx_dev_attr_store+0x10/0x10 [ 1902.901741] internal_create_group+0x322/0xb20 [ 1902.902084] ? __pfx_internal_create_group+0x10/0x10 [ 1902.902459] ? kernfs_add_one+0x17a/0x4f0 [ 1902.902774] ? kernfs_create_link+0x1bb/0x240 [ 1902.903107] internal_create_groups.part.0+0x90/0x140 [ 1902.903467] sysfs_create_groups+0x29/0x50 [ 1902.903770] device_add+0x711/0x1ec0 [ 1902.904038] ? __pfx_dev_set_name+0x10/0x10 [ 1902.904352] ? __pfx_device_add+0x10/0x10 [ 1902.904661] ? __init_waitqueue_head+0xca/0x150 [ 1902.905014] netdev_register_kobject+0x17e/0x3b0 [ 1902.905366] register_netdevice+0xd60/0x1530 [ 1902.905699] ? __pfx_register_netdevice+0x10/0x10 [ 1902.906060] ? dev_addr_mod+0x29e/0x350 [ 1902.906351] __tun_chr_ioctl+0x210b/0x3f80 [ 1902.906685] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1902.907025] ? __pfx___fget_files+0x10/0x10 [ 1902.907334] ? lock_acquire+0x32/0xc0 [ 1902.907635] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1902.907960] __x64_sys_ioctl+0x19e/0x210 [ 1902.908261] do_syscall_64+0x3f/0x90 [ 1902.908544] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1902.908921] RIP: 0033:0x7f59fcc15b19 [ 1902.909189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1902.910431] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1902.910970] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1902.911457] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1902.911948] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1902.912452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1902.912950] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1902.913463] [ 1902.931317] Invalid ELF header magic: != ELF 04:55:36 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 45) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1903.022193] Invalid ELF header magic: != ELF [ 1903.074463] FAULT_INJECTION: forcing a failure. [ 1903.074463] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.076431] CPU: 1 PID: 10112 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1903.077554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1903.078690] Call Trace: [ 1903.079069] [ 1903.079401] dump_stack_lvl+0x8f/0xb7 [ 1903.079980] should_fail_ex.cold+0x5/0xa [ 1903.080576] ? __kernfs_new_node+0xd4/0x8c0 [ 1903.081204] should_failslab+0x9/0x20 [ 1903.081765] kmem_cache_alloc+0x5a/0x410 [ 1903.082360] __kernfs_new_node+0xd4/0x8c0 [ 1903.082982] ? lock_release+0x3b6/0x750 [ 1903.083568] ? __pfx___kernfs_new_node+0x10/0x10 [ 1903.084248] ? __pfx_lock_release+0x10/0x10 [ 1903.084887] ? lock_acquire+0x32/0xc0 [ 1903.085492] ? up_write+0x1b0/0x520 [ 1903.086068] kernfs_new_node+0x97/0x120 [ 1903.086689] __kernfs_create_file+0x55/0x350 [ 1903.087358] sysfs_add_file_mode_ns+0x21c/0x440 [ 1903.088061] ? __pfx_dev_attr_store+0x10/0x10 [ 1903.088738] internal_create_group+0x322/0xb20 [ 1903.089440] ? __pfx_internal_create_group+0x10/0x10 [ 1903.090191] ? kernfs_add_one+0x17a/0x4f0 [ 1903.090853] ? kernfs_create_link+0x1bb/0x240 [ 1903.091528] internal_create_groups.part.0+0x90/0x140 [ 1903.092268] sysfs_create_groups+0x29/0x50 [ 1903.092877] device_add+0x711/0x1ec0 [ 1903.093426] ? __pfx_dev_set_name+0x10/0x10 [ 1903.094055] ? __pfx_device_add+0x10/0x10 [ 1903.094666] ? __init_waitqueue_head+0xca/0x150 [ 1903.095357] netdev_register_kobject+0x17e/0x3b0 [ 1903.096052] register_netdevice+0xd60/0x1530 [ 1903.096702] ? __pfx_register_netdevice+0x10/0x10 [ 1903.097431] ? dev_addr_mod+0x29e/0x350 [ 1903.098013] __tun_chr_ioctl+0x210b/0x3f80 [ 1903.098685] ? lock_is_held_type+0xdb/0x130 [ 1903.099343] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1903.100010] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1903.100848] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1903.101671] ? lockdep_hardirqs_on+0x7d/0x100 [ 1903.102368] ? __x64_sys_ioctl+0x120/0x210 [ 1903.102993] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1903.103656] __x64_sys_ioctl+0x19e/0x210 [ 1903.104271] do_syscall_64+0x3f/0x90 [ 1903.104847] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1903.105615] RIP: 0033:0x7f2e2b599b19 [ 1903.106178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1903.108757] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1903.109843] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1903.110867] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1903.111896] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1903.112906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1903.113907] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1903.114969] 04:55:36 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 56) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1903.172178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1903.180187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1903.183940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:55:36 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000000040)=@mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7ff7}, @device_a, @broadcast, @from_mac=@broadcast, {0x3, 0x4}}, @ver_80211n={0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @addba_req={0x3, 0x0, {0x0, {0x1, 0x1, 0x8}, 0x80, {0x7, 0x2}}}}, 0x25) 04:55:36 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x02\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:55:36 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) [ 1903.268238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:55:36 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 57) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:36 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) [ 1903.397271] FAULT_INJECTION: forcing a failure. [ 1903.397271] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.399746] CPU: 0 PID: 10129 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1903.400827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1903.401905] Call Trace: [ 1903.402262] [ 1903.402595] dump_stack_lvl+0x8f/0xb7 [ 1903.403156] should_fail_ex.cold+0x5/0xa [ 1903.403744] ? __kernfs_new_node+0xd4/0x8c0 [ 1903.404362] should_failslab+0x9/0x20 [ 1903.404902] kmem_cache_alloc+0x5a/0x410 [ 1903.405481] __kernfs_new_node+0xd4/0x8c0 [ 1903.406067] ? lock_release+0x3b6/0x750 [ 1903.406638] ? __pfx___kernfs_new_node+0x10/0x10 [ 1903.407327] ? __pfx_lock_release+0x10/0x10 [ 1903.407934] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1903.408748] ? up_write+0x1b0/0x520 [ 1903.409292] kernfs_new_node+0x97/0x120 [ 1903.409900] __kernfs_create_file+0x55/0x350 [ 1903.410544] sysfs_add_file_mode_ns+0x21c/0x440 [ 1903.411233] ? __pfx_dev_attr_store+0x10/0x10 [ 1903.411895] internal_create_group+0x322/0xb20 [ 1903.412552] ? __pfx_internal_create_group+0x10/0x10 [ 1903.413279] ? kernfs_add_one+0x17a/0x4f0 [ 1903.413908] ? kernfs_create_link+0x1bb/0x240 [ 1903.414554] internal_create_groups.part.0+0x90/0x140 [ 1903.415322] sysfs_create_groups+0x29/0x50 [ 1903.415906] device_add+0x711/0x1ec0 [ 1903.416452] ? __pfx_dev_set_name+0x10/0x10 [ 1903.417067] ? __pfx_device_add+0x10/0x10 [ 1903.417697] ? __init_waitqueue_head+0xca/0x150 [ 1903.418362] netdev_register_kobject+0x17e/0x3b0 [ 1903.419072] register_netdevice+0xd60/0x1530 [ 1903.419740] ? __pfx_register_netdevice+0x10/0x10 [ 1903.420438] ? dev_addr_mod+0x29e/0x350 [ 1903.421021] __tun_chr_ioctl+0x210b/0x3f80 [ 1903.421642] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1903.422300] ? __pfx___fget_files+0x10/0x10 [ 1903.422896] ? lock_acquire+0x32/0xc0 [ 1903.423461] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1903.424081] __x64_sys_ioctl+0x19e/0x210 [ 1903.424651] do_syscall_64+0x3f/0x90 [ 1903.425186] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1903.425893] RIP: 0033:0x7fcb82d36b19 [ 1903.426401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1903.428707] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1903.429648] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1903.430590] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1903.431504] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1903.432426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1903.433343] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1903.434292] 04:55:36 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), 0x0, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) [ 1903.442584] Invalid ELF header magic: != ELF 04:55:36 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 61) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1903.535185] Invalid ELF header magic: != ELF 04:55:36 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 46) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1903.573830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:55:36 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=ANY=[@ANYBLOB="d00000000802af42013cc995becd00015050505050500000030100000001000000"], 0x21) 04:55:36 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) [ 1903.729589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1903.855667] FAULT_INJECTION: forcing a failure. [ 1903.855667] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.858150] CPU: 1 PID: 10152 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1903.859168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1903.860165] Call Trace: [ 1903.860495] [ 1903.860791] dump_stack_lvl+0x8f/0xb7 [ 1903.861321] should_fail_ex.cold+0x5/0xa [ 1903.861855] ? __kernfs_new_node+0xd4/0x8c0 [ 1903.862415] should_failslab+0x9/0x20 [ 1903.862976] kmem_cache_alloc+0x5a/0x410 [ 1903.863524] __kernfs_new_node+0xd4/0x8c0 [ 1903.864076] ? lock_release+0x3b6/0x750 [ 1903.864597] ? __pfx___kernfs_new_node+0x10/0x10 [ 1903.865217] ? __pfx_lock_release+0x10/0x10 [ 1903.865770] ? lock_acquire+0x32/0xc0 [ 1903.866295] ? up_write+0x1b0/0x520 [ 1903.866830] kernfs_new_node+0x97/0x120 [ 1903.867370] __kernfs_create_file+0x55/0x350 [ 1903.867944] sysfs_add_file_mode_ns+0x21c/0x440 [ 1903.868548] ? __pfx_dev_attr_store+0x10/0x10 [ 1903.869143] internal_create_group+0x322/0xb20 [ 1903.869747] ? __pfx_internal_create_group+0x10/0x10 [ 1903.870402] ? kernfs_add_one+0x17a/0x4f0 [ 1903.870979] ? kernfs_create_link+0x1bb/0x240 [ 1903.871561] internal_create_groups.part.0+0x90/0x140 [ 1903.872231] sysfs_create_groups+0x29/0x50 [ 1903.872794] device_add+0x711/0x1ec0 [ 1903.873289] ? __pfx_dev_set_name+0x10/0x10 [ 1903.873859] ? __pfx_device_add+0x10/0x10 [ 1903.874402] ? __init_waitqueue_head+0xca/0x150 [ 1903.875033] netdev_register_kobject+0x17e/0x3b0 [ 1903.875655] register_netdevice+0xd60/0x1530 [ 1903.876250] ? __pfx_register_netdevice+0x10/0x10 [ 1903.876896] ? dev_addr_mod+0x29e/0x350 [ 1903.877413] __tun_chr_ioctl+0x210b/0x3f80 [ 1903.877965] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1903.878566] ? __pfx___fget_files+0x10/0x10 [ 1903.879121] ? lock_acquire+0x32/0xc0 [ 1903.879655] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1903.880226] __x64_sys_ioctl+0x19e/0x210 [ 1903.880766] do_syscall_64+0x3f/0x90 [ 1903.881260] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1903.881928] RIP: 0033:0x7f59fcc15b19 [ 1903.882396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1903.884585] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1903.885508] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1903.886376] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1903.887259] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1903.888130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1903.888998] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1903.889906] [ 1904.039302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:55:50 executing program 3: syz_80211_inject_frame(&(0x7f0000003140)=@broadcast, &(0x7f0000000000)=ANY=[@ANYBLOB="d000000008021100000008022e00000000010000005000000301000000010000002bd7fc856c153f05af8326e9c16608fe804d5c666bc55aa9ae9a7006b3da4c747127738912ff931444"], 0x21) 04:55:50 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 47) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:50 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:50 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 57) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:50 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, 0x0) 04:55:50 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 62) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:55:50 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), 0x0, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) [ 1917.098217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:55:50 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x03\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1917.121742] Invalid ELF header magic: != ELF 04:55:50 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, 0x0) [ 1917.181639] FAULT_INJECTION: forcing a failure. [ 1917.181639] name failslab, interval 1, probability 0, space 0, times 0 [ 1917.183136] CPU: 1 PID: 10174 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1917.183680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1917.184217] Call Trace: [ 1917.184397] [ 1917.184554] dump_stack_lvl+0x8f/0xb7 [ 1917.184842] should_fail_ex.cold+0x5/0xa [ 1917.185135] ? __kernfs_new_node+0xd4/0x8c0 [ 1917.185440] should_failslab+0x9/0x20 [ 1917.185713] kmem_cache_alloc+0x5a/0x410 [ 1917.186012] __kernfs_new_node+0xd4/0x8c0 [ 1917.186319] ? lock_release+0x3b6/0x750 [ 1917.186613] ? __pfx___kernfs_new_node+0x10/0x10 [ 1917.186950] ? __pfx_lock_release+0x10/0x10 [ 1917.187254] ? lock_acquire+0x32/0xc0 [ 1917.187544] ? up_write+0x1b0/0x520 [ 1917.187822] kernfs_new_node+0x97/0x120 [ 1917.188111] __kernfs_create_file+0x55/0x350 [ 1917.188420] sysfs_add_file_mode_ns+0x21c/0x440 [ 1917.188754] ? __pfx_dev_attr_store+0x10/0x10 [ 1917.189079] internal_create_group+0x322/0xb20 [ 1917.189414] ? __pfx_internal_create_group+0x10/0x10 [ 1917.189763] ? kernfs_add_one+0x17a/0x4f0 [ 1917.190062] ? kernfs_create_link+0x1bb/0x240 [ 1917.190374] internal_create_groups.part.0+0x90/0x140 [ 1917.190748] sysfs_create_groups+0x29/0x50 [ 1917.191044] device_add+0x711/0x1ec0 [ 1917.191320] ? __pfx_dev_set_name+0x10/0x10 [ 1917.191637] ? __pfx_device_add+0x10/0x10 [ 1917.191943] ? __init_waitqueue_head+0xca/0x150 [ 1917.192301] netdev_register_kobject+0x17e/0x3b0 [ 1917.192654] register_netdevice+0xd60/0x1530 [ 1917.192987] ? __pfx_register_netdevice+0x10/0x10 [ 1917.193343] ? dev_addr_mod+0x29e/0x350 [ 1917.193635] __tun_chr_ioctl+0x210b/0x3f80 [ 1917.193949] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1917.194290] ? __pfx___fget_files+0x10/0x10 [ 1917.194617] ? lock_acquire+0x32/0xc0 [ 1917.194913] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1917.195234] __x64_sys_ioctl+0x19e/0x210 [ 1917.195535] do_syscall_64+0x3f/0x90 [ 1917.195817] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1917.196192] RIP: 0033:0x7fcb82d36b19 [ 1917.196460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1917.197694] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1917.198221] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1917.198741] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1917.199238] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1917.199737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1917.200233] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1917.200742] [ 1917.413544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:56:02 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x56) syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1}}}}, 0x21) 04:56:02 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x05\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:56:02 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 59) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:02 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:02 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, 0x0) [ 1928.961068] Invalid ELF header magic: != ELF 04:56:02 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 58) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:02 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 63) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:02 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) [ 1928.986043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1929.001397] FAULT_INJECTION: forcing a failure. [ 1929.001397] name failslab, interval 1, probability 0, space 0, times 0 [ 1929.002371] CPU: 1 PID: 10198 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1929.002923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1929.003479] Call Trace: [ 1929.003660] [ 1929.003824] dump_stack_lvl+0x8f/0xb7 [ 1929.004116] should_fail_ex.cold+0x5/0xa [ 1929.004422] ? __kernfs_new_node+0xd4/0x8c0 [ 1929.004730] should_failslab+0x9/0x20 [ 1929.005002] kmem_cache_alloc+0x5a/0x410 [ 1929.005296] __kernfs_new_node+0xd4/0x8c0 [ 1929.005592] ? lock_release+0x3b6/0x750 [ 1929.005876] ? __pfx___kernfs_new_node+0x10/0x10 [ 1929.006211] ? __pfx_lock_release+0x10/0x10 [ 1929.006508] ? lock_acquire+0x32/0xc0 [ 1929.006828] ? up_write+0x1b0/0x520 [ 1929.007100] kernfs_new_node+0x97/0x120 [ 1929.007394] __kernfs_create_file+0x55/0x350 [ 1929.007704] sysfs_add_file_mode_ns+0x21c/0x440 [ 1929.008034] ? __pfx_dev_attr_store+0x10/0x10 [ 1929.008360] internal_create_group+0x322/0xb20 [ 1929.008686] ? __pfx_internal_create_group+0x10/0x10 [ 1929.009035] ? kernfs_add_one+0x17a/0x4f0 [ 1929.009334] ? kernfs_create_link+0x1bb/0x240 [ 1929.009650] internal_create_groups.part.0+0x90/0x140 [ 1929.010014] sysfs_create_groups+0x29/0x50 [ 1929.010314] device_add+0x711/0x1ec0 [ 1929.010586] ? __pfx_dev_set_name+0x10/0x10 [ 1929.010904] ? __pfx_device_add+0x10/0x10 [ 1929.011196] ? __init_waitqueue_head+0xca/0x150 [ 1929.011534] netdev_register_kobject+0x17e/0x3b0 [ 1929.011878] register_netdevice+0xd60/0x1530 [ 1929.012204] ? __pfx_register_netdevice+0x10/0x10 [ 1929.012543] ? dev_addr_mod+0x29e/0x350 [ 1929.012829] __tun_chr_ioctl+0x210b/0x3f80 [ 1929.013134] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1929.013457] ? __pfx___fget_files+0x10/0x10 [ 1929.013759] ? lock_acquire+0x32/0xc0 [ 1929.014051] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1929.014369] __x64_sys_ioctl+0x19e/0x210 [ 1929.014661] do_syscall_64+0x3f/0x90 [ 1929.014953] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1929.015323] RIP: 0033:0x7f2e2b599b19 [ 1929.015586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1929.016784] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1929.017300] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1929.017779] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1929.018262] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1929.018747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1929.019215] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1929.019705] 04:56:02 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x06\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:56:02 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) [ 1929.137544] Invalid ELF header magic: != ELF [ 1929.144304] FAULT_INJECTION: forcing a failure. [ 1929.144304] name failslab, interval 1, probability 0, space 0, times 0 [ 1929.145428] CPU: 1 PID: 10200 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1929.145974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1929.146519] Call Trace: [ 1929.146701] [ 1929.146870] dump_stack_lvl+0x8f/0xb7 [ 1929.147153] should_fail_ex.cold+0x5/0xa [ 1929.147444] ? __kernfs_new_node+0xd4/0x8c0 [ 1929.147750] should_failslab+0x9/0x20 [ 1929.148022] kmem_cache_alloc+0x5a/0x410 [ 1929.148312] __kernfs_new_node+0xd4/0x8c0 [ 1929.148605] ? lock_release+0x3b6/0x750 [ 1929.148886] ? __pfx___kernfs_new_node+0x10/0x10 [ 1929.149214] ? __pfx_lock_release+0x10/0x10 [ 1929.149514] ? lock_acquire+0x32/0xc0 [ 1929.149802] ? up_write+0x1b0/0x520 [ 1929.150075] kernfs_new_node+0x97/0x120 [ 1929.150359] __kernfs_create_file+0x55/0x350 [ 1929.150669] sysfs_add_file_mode_ns+0x21c/0x440 [ 1929.151005] ? __pfx_dev_attr_store+0x10/0x10 [ 1929.151327] internal_create_group+0x322/0xb20 [ 1929.151654] ? __pfx_internal_create_group+0x10/0x10 [ 1929.152004] ? kernfs_add_one+0x17a/0x4f0 [ 1929.152305] ? kernfs_create_link+0x1bb/0x240 [ 1929.152620] internal_create_groups.part.0+0x90/0x140 [ 1929.152981] sysfs_create_groups+0x29/0x50 [ 1929.153279] device_add+0x711/0x1ec0 [ 1929.153544] ? __pfx_dev_set_name+0x10/0x10 [ 1929.153847] ? __pfx_device_add+0x10/0x10 [ 1929.154136] ? __init_waitqueue_head+0xca/0x150 [ 1929.154468] netdev_register_kobject+0x17e/0x3b0 [ 1929.154819] register_netdevice+0xd60/0x1530 [ 1929.155136] ? __pfx_register_netdevice+0x10/0x10 [ 1929.155476] ? dev_addr_mod+0x29e/0x350 [ 1929.155755] __tun_chr_ioctl+0x210b/0x3f80 [ 1929.156055] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1929.156375] ? __pfx___fget_files+0x10/0x10 [ 1929.156674] ? lock_acquire+0x32/0xc0 [ 1929.156963] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1929.157269] __x64_sys_ioctl+0x19e/0x210 [ 1929.157556] do_syscall_64+0x3f/0x90 [ 1929.157828] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1929.158192] RIP: 0033:0x7f59fcc15b19 [ 1929.158447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1929.159623] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1929.160128] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1929.160604] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1929.161076] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1929.161542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1929.162012] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1929.162494] 04:56:02 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 64) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:02 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2, @private2, @private2}) 04:56:02 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 60) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:02 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\a\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:56:02 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 49) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:02 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 59) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1929.291996] FAULT_INJECTION: forcing a failure. [ 1929.291996] name failslab, interval 1, probability 0, space 0, times 0 [ 1929.293146] CPU: 1 PID: 10215 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1929.293693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1929.294230] Call Trace: [ 1929.294408] [ 1929.294569] dump_stack_lvl+0x8f/0xb7 [ 1929.294872] should_fail_ex.cold+0x5/0xa [ 1929.295167] ? __kernfs_new_node+0xd4/0x8c0 [ 1929.295475] should_failslab+0x9/0x20 [ 1929.295748] kmem_cache_alloc+0x5a/0x410 [ 1929.296045] __kernfs_new_node+0xd4/0x8c0 [ 1929.296340] ? lock_release+0x3b6/0x750 [ 1929.296624] ? __pfx___kernfs_new_node+0x10/0x10 [ 1929.296964] ? __pfx_lock_release+0x10/0x10 [ 1929.297264] ? lock_acquire+0x32/0xc0 [ 1929.297546] ? up_write+0x1b0/0x520 [ 1929.297826] kernfs_new_node+0x97/0x120 [ 1929.298119] __kernfs_create_file+0x55/0x350 [ 1929.298430] sysfs_add_file_mode_ns+0x21c/0x440 [ 1929.298774] ? __pfx_dev_attr_store+0x10/0x10 [ 1929.299099] internal_create_group+0x322/0xb20 [ 1929.299231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1929.299423] ? __pfx_internal_create_group+0x10/0x10 [ 1929.300833] ? kernfs_add_one+0x17a/0x4f0 [ 1929.301134] ? kernfs_create_link+0x1bb/0x240 [ 1929.301449] internal_create_groups.part.0+0x90/0x140 [ 1929.301821] sysfs_create_groups+0x29/0x50 [ 1929.302119] device_add+0x711/0x1ec0 [ 1929.302389] ? __pfx_dev_set_name+0x10/0x10 [ 1929.302700] ? __pfx_device_add+0x10/0x10 [ 1929.303014] ? __init_waitqueue_head+0xca/0x150 [ 1929.303352] netdev_register_kobject+0x17e/0x3b0 [ 1929.303699] register_netdevice+0xd60/0x1530 [ 1929.304020] ? __pfx_register_netdevice+0x10/0x10 [ 1929.304365] ? dev_addr_mod+0x29e/0x350 [ 1929.304646] __tun_chr_ioctl+0x210b/0x3f80 [ 1929.304959] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1929.305280] ? __pfx___fget_files+0x10/0x10 [ 1929.305583] ? lock_acquire+0x32/0xc0 [ 1929.305870] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1929.306180] __x64_sys_ioctl+0x19e/0x210 [ 1929.306471] do_syscall_64+0x3f/0x90 [ 1929.306751] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1929.307111] RIP: 0033:0x7ff461a5bb19 [ 1929.307370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1929.308547] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1929.309058] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1929.309528] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1929.309996] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1929.310479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1929.310954] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1929.311442] [ 1929.338504] Invalid ELF header magic: != ELF 04:56:02 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) [ 1929.374699] FAULT_INJECTION: forcing a failure. [ 1929.374699] name failslab, interval 1, probability 0, space 0, times 0 [ 1929.375812] CPU: 1 PID: 10226 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1929.376369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1929.376933] Call Trace: [ 1929.377114] [ 1929.377280] dump_stack_lvl+0x8f/0xb7 [ 1929.377569] should_fail_ex.cold+0x5/0xa [ 1929.377874] ? __kernfs_new_node+0xd4/0x8c0 [ 1929.378188] should_failslab+0x9/0x20 [ 1929.378466] kmem_cache_alloc+0x5a/0x410 [ 1929.378765] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1929.379184] __kernfs_new_node+0xd4/0x8c0 [ 1929.379488] ? mark_held_locks+0x9e/0xe0 [ 1929.379785] ? __pfx___kernfs_new_node+0x10/0x10 [ 1929.380122] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1929.380514] ? lockdep_hardirqs_on+0x7d/0x100 [ 1929.380832] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1929.381232] kernfs_new_node+0x97/0x120 [ 1929.381539] __kernfs_create_file+0x55/0x350 [ 1929.381857] sysfs_add_file_mode_ns+0x21c/0x440 [ 1929.382195] ? __pfx_dev_attr_store+0x10/0x10 [ 1929.382534] internal_create_group+0x322/0xb20 [ 1929.382878] ? __pfx_internal_create_group+0x10/0x10 [ 1929.383244] ? kernfs_add_one+0x17a/0x4f0 [ 1929.383550] ? kernfs_create_link+0x1bb/0x240 [ 1929.383877] internal_create_groups.part.0+0x90/0x140 [ 1929.384263] sysfs_create_groups+0x29/0x50 [ 1929.384563] device_add+0x711/0x1ec0 [ 1929.384844] ? __pfx_dev_set_name+0x10/0x10 [ 1929.385169] ? __pfx_device_add+0x10/0x10 [ 1929.385479] ? __init_waitqueue_head+0xca/0x150 [ 1929.385829] netdev_register_kobject+0x17e/0x3b0 [ 1929.386181] register_netdevice+0xd60/0x1530 [ 1929.386507] ? __pfx_register_netdevice+0x10/0x10 [ 1929.386879] ? dev_addr_mod+0x29e/0x350 [ 1929.387166] __tun_chr_ioctl+0x210b/0x3f80 [ 1929.387479] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1929.387802] ? __pfx___fget_files+0x10/0x10 [ 1929.388112] ? lock_acquire+0x32/0xc0 [ 1929.388407] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1929.388723] __x64_sys_ioctl+0x19e/0x210 [ 1929.389021] do_syscall_64+0x3f/0x90 [ 1929.389303] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1929.389668] RIP: 0033:0x7f59fcc15b19 [ 1929.389927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1929.391141] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1929.391667] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1929.392157] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1929.392656] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1929.393142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1929.393630] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1929.394148] 04:56:02 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2, @private2, @private2}) 04:56:02 executing program 3: syz_80211_inject_frame(&(0x7f0000003140)=@device_b, &(0x7f0000000500)=@mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @device_a, @random="62c722d851ca", {0x1, 0x40}}, @ver_80211n={0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x8439, 0x5, @device_a, {0x0, 0x1e, @random="731361076e6a1ef1525a53d7b01d553f8203ef61ff17a875d637b61f70f4"}, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x3, 0x0, {0x289, 0x1, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x1, 0x64, 0x30}}, [{0xdd, 0xcc, "13f3bfa57ac86086dfb0753d5e3a8919bd763cc924e4c8d771aefbbb207c4cfea7575bf81ffb55e2e49a85f075c009cb54c9b4597b79dc5cb614ece5845d582f61d5c6d3509af8d50191d5d00af16c7cfddff7031c61d3ea740257e4be8c8a210e86914a88aaf62b45a93a087308cfa8c9535c7ec27c85bcc1c81bcbbea11b6dd26fe97ad86798630d50c71346de624cee6930ba03d88cdc9f281198489c12a3afdb0aa13402d6cbb256cbf10eb4f3beecd5777723f46a010ce2579596514ca40dab5136e9fdc53a18571f14"}, {0xdd, 0xa3, "32b21b7f56cf3a17859c044e4d8c3877a01ad2549b1f5ae2989ee8f843ffbafbcc3737ed06d602ed700a080bbcf5270cc77312a028faf23561427db3799daa7b9be0bcb3b033a3abfc9eedaef52b2437acb7a1978831cfad327e2af9f7affa01761f39e89f5b6c903d77cdcfeca0d4c92efee7a83f67b7743a70e4e3198006850c9e8dadc359bcaf37dbb115fbb9cc58747a7e2d546a87262e94239dc7ea7267d7957f"}, {0xdd, 0x58, "9ba989408969c4408e7e29b76d4aba1ad2f42b89762dca0a6746e14844bbf2236c253c0ca428b8663bfe0f946fde68e8bea9c9f3707088332741ce1d368617db04f717159f0919310d03b67e4e23db0c83f23c965ef96eff"}, {0xdd, 0x4f, "08d30d1959c24f900535a715fe57bcc678cf2381f0995478d918f96d16b539d6c5eff017e01e6199b93e373e36d41877258f227c42613166e01ab39ac07c6c05078dac33904c1341caf2ba75aed6f5"}, {0xdd, 0xce, "616b608efa2f7c8bb904ad15f163b435e1d8376667ee66e9936a863a6fe747eb4a32ba22efa561f1f889df82599302f7d64fc855ceb738d8a20915081d98005e32278cb9438ee851ee743643e615ebb7475138335f98dd8fdebe4337700e2ef078cd002a7d8e24c57ade84495ad2f36cc7c633f62faa40755bb1286396a8b70f170c8c1b4127cee17533a9d2b8fcef8b73fbc9bca81dcc4b542f15bd484f55af810ec1d12f3cc150a77c2101b6cd0adbcce558923fb304b22ab70f1bf6c52ff14de681f1255ce0cd48edf361a4aa"}, {0xdd, 0x40, "275a7d76f3a1eab141092859e8b2cf902419b7ea13f0843045f22992044d9d074571ad623d4938b04aeb0c217ab159c4963156862c98ea07cf5b7309a7ffb190"}, {0xdd, 0xf0, "149734cbd8463c25b50b3508d1003319fe06d65f2d92248206a61e34f12035a893f9ad6daeedb1eb4acda6a31fd142fdb71135eb5140b391a4fd55b40f66cb37b6e17c964719986def9eb7833f7920e665ddc3d6868db945ad90481690d43a9068f55cf4b21bb34d7758ba9bab2e7da7319f8f248fdcb8ad6f353564d271c93b521dd8e3dd2f000247337a1cdfde82f0ea3d406a123fa17c95decf03b455aa6a5b6fc62a14e80ba02b6d3a5496e6b84cbdc929327d351f56fd3f09ebe37052a62e32010986ae29f270381a0e1072e5044669631172e5684af7771f38e66b2911cf00b2f99d6153f5e01153707813c863"}, {0xdd, 0x1c, "42a6afd3decc294dbe721d5980e68c6140ff062717398177233381ca"}]}, 0x4a2) [ 1929.428527] FAULT_INJECTION: forcing a failure. [ 1929.428527] name failslab, interval 1, probability 0, space 0, times 0 [ 1929.430605] CPU: 0 PID: 10221 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1929.431611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1929.432608] Call Trace: [ 1929.432939] [ 1929.433234] dump_stack_lvl+0x8f/0xb7 [ 1929.433753] should_fail_ex.cold+0x5/0xa [ 1929.434283] ? __kernfs_new_node+0xd4/0x8c0 [ 1929.434865] should_failslab+0x9/0x20 [ 1929.435361] kmem_cache_alloc+0x5a/0x410 [ 1929.435898] __kernfs_new_node+0xd4/0x8c0 [ 1929.436438] ? lock_release+0x3b6/0x750 [ 1929.436960] ? __pfx___kernfs_new_node+0x10/0x10 [ 1929.437569] ? __pfx_lock_release+0x10/0x10 [ 1929.438117] ? lock_acquire+0x32/0xc0 [ 1929.438641] ? up_write+0x1b0/0x520 [ 1929.439150] kernfs_new_node+0x97/0x120 [ 1929.439688] __kernfs_create_file+0x55/0x350 [ 1929.440268] sysfs_add_file_mode_ns+0x21c/0x440 [ 1929.440882] ? __pfx_dev_attr_store+0x10/0x10 [ 1929.441482] internal_create_group+0x322/0xb20 [ 1929.442098] ? __pfx_internal_create_group+0x10/0x10 [ 1929.442780] ? kernfs_add_one+0x17a/0x4f0 [ 1929.443338] ? kernfs_create_link+0x1bb/0x240 [ 1929.443919] internal_create_groups.part.0+0x90/0x140 [ 1929.444601] sysfs_create_groups+0x29/0x50 [ 1929.445147] device_add+0x711/0x1ec0 [ 1929.445645] ? __pfx_dev_set_name+0x10/0x10 [ 1929.446210] ? __pfx_device_add+0x10/0x10 [ 1929.446772] ? __init_waitqueue_head+0xca/0x150 [ 1929.447397] netdev_register_kobject+0x17e/0x3b0 [ 1929.448025] register_netdevice+0xd60/0x1530 [ 1929.448617] ? __pfx_register_netdevice+0x10/0x10 [ 1929.449251] ? dev_addr_mod+0x29e/0x350 [ 1929.449777] __tun_chr_ioctl+0x210b/0x3f80 [ 1929.450333] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1929.450943] ? __pfx___fget_files+0x10/0x10 [ 1929.451512] ? lock_acquire+0x32/0xc0 [ 1929.452048] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1929.452619] __x64_sys_ioctl+0x19e/0x210 [ 1929.453156] do_syscall_64+0x3f/0x90 [ 1929.453657] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1929.454322] RIP: 0033:0x7f2e2b599b19 [ 1929.454820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1929.457000] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1929.457942] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1929.458839] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1929.459727] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1929.460598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1929.461471] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1929.462375] 04:56:02 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x10\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1929.505925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1929.556813] Invalid ELF header magic: != ELF 04:56:02 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 61) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:02 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 65) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1929.680411] FAULT_INJECTION: forcing a failure. [ 1929.680411] name failslab, interval 1, probability 0, space 0, times 0 [ 1929.681546] CPU: 1 PID: 10246 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1929.682109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1929.682671] Call Trace: [ 1929.682869] [ 1929.683035] dump_stack_lvl+0x8f/0xb7 [ 1929.683332] should_fail_ex.cold+0x5/0xa [ 1929.683630] ? __kernfs_new_node+0xd4/0x8c0 [ 1929.683949] should_failslab+0x9/0x20 [ 1929.684230] kmem_cache_alloc+0x5a/0x410 [ 1929.684530] __kernfs_new_node+0xd4/0x8c0 [ 1929.684834] ? lock_release+0x3b6/0x750 [ 1929.685128] ? __pfx___kernfs_new_node+0x10/0x10 [ 1929.685477] ? __pfx_lock_release+0x10/0x10 [ 1929.685787] ? lock_acquire+0x32/0xc0 [ 1929.686070] ? up_write+0x1b0/0x520 [ 1929.686351] kernfs_new_node+0x97/0x120 [ 1929.686654] __kernfs_create_file+0x55/0x350 [ 1929.686986] sysfs_add_file_mode_ns+0x21c/0x440 [ 1929.687328] ? __pfx_dev_attr_store+0x10/0x10 [ 1929.687675] internal_create_group+0x322/0xb20 [ 1929.688021] ? __pfx_internal_create_group+0x10/0x10 [ 1929.688387] ? kernfs_add_one+0x17a/0x4f0 [ 1929.688696] ? kernfs_create_link+0x1bb/0x240 [ 1929.689024] internal_create_groups.part.0+0x90/0x140 [ 1929.689389] sysfs_create_groups+0x29/0x50 [ 1929.689696] device_add+0x711/0x1ec0 [ 1929.689968] ? __pfx_dev_set_name+0x10/0x10 [ 1929.690284] ? __pfx_device_add+0x10/0x10 [ 1929.690573] ? __init_waitqueue_head+0xca/0x150 [ 1929.690935] netdev_register_kobject+0x17e/0x3b0 [ 1929.691282] register_netdevice+0xd60/0x1530 [ 1929.691600] ? __pfx_register_netdevice+0x10/0x10 [ 1929.691956] ? dev_addr_mod+0x29e/0x350 [ 1929.692239] __tun_chr_ioctl+0x210b/0x3f80 [ 1929.692554] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1929.692887] ? __pfx___fget_files+0x10/0x10 [ 1929.693198] ? lock_acquire+0x32/0xc0 [ 1929.693498] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1929.693827] __x64_sys_ioctl+0x19e/0x210 [ 1929.694127] do_syscall_64+0x3f/0x90 [ 1929.694412] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1929.694797] RIP: 0033:0x7f2e2b599b19 [ 1929.695061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1929.696285] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1929.696819] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1929.697311] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1929.697797] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1929.698284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1929.698774] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1929.699282] [ 1929.811274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:56:19 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2, @private2, @private2}) 04:56:19 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 66) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:19 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 50) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:19 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x12\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:56:19 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:56:19 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 62) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:19 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 60) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:19 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r2, 0x8, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r4) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c00000025d43db43bff238f8de289c767951905a26237486013c7b29ead719e840c7fd55d71b7d9b92eab0dd786766150de81c2cbd1fee3160bc067fbac4f1a53653d4de534190cd6cefc3593da3b9074f429025b945ebb470a2cfe5f946376149d1c558adb66732ac54c", @ANYRES16=r5, @ANYBLOB="02002abd7000fedbdf250500000014000300fe8000000000000000000000000000bb14000300ff0200000000000000000000000000013000070073797374656d5f753a6f626a6563745f723a69707461626c65735f696e697472635f657865635f743a733000"], 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf251600000008000300", @ANYRES32=r6, @ANYBLOB="0c000600030000000300865c14ee8f72e01db8fd326326f57827f9f1ba35b99084795bbc1cf1ba9de25e4abe63c3c676502d1814411856b0000335ceca53a785967e274a2ef8bb49ca43e3efa2d663b238252f8007c028224daa678096f40d3e556c70ed3fde8b7c7d48dacde6095108cf63fc126eed27916b32df6beaf9241290a8a96e543e68898249edf7eb8cc8a899e2688fba29651de1986a8cda16ef", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600010000000100000008000300", @ANYRES32=r7, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20000011}, 0x1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r2, 0xe9dcfcb24c5d4b32, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r0, 0x8, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r9, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0xe0, r5, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_run_t:s0\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000800) syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=ANY=[@ANYRES64=r8], 0x21) [ 1946.333632] FAULT_INJECTION: forcing a failure. [ 1946.333632] name failslab, interval 1, probability 0, space 0, times 0 [ 1946.335121] CPU: 1 PID: 10256 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1946.335689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1946.336234] Call Trace: [ 1946.336416] [ 1946.336578] dump_stack_lvl+0x8f/0xb7 [ 1946.336870] should_fail_ex.cold+0x5/0xa [ 1946.337175] ? __kernfs_new_node+0xd4/0x8c0 [ 1946.337478] should_failslab+0x9/0x20 [ 1946.337760] kmem_cache_alloc+0x5a/0x410 [ 1946.338047] ? kernfs_add_one+0x175/0x4f0 [ 1946.338352] __kernfs_new_node+0xd4/0x8c0 [ 1946.338649] ? __lock_acquire+0x164d/0x5e70 [ 1946.338978] ? __pfx___kernfs_new_node+0x10/0x10 [ 1946.339345] ? __pfx___lock_acquire+0x10/0x10 [ 1946.339671] ? kernfs_add_one+0x17a/0x4f0 [ 1946.339979] ? map_id_range_down+0x1c4/0x340 [ 1946.340302] kernfs_new_node+0x97/0x120 [ 1946.340596] __kernfs_create_file+0x55/0x350 [ 1946.340912] sysfs_add_file_mode_ns+0x21c/0x440 [ 1946.341251] ? __pfx_dev_attr_store+0x10/0x10 [ 1946.341572] sysfs_create_file_ns+0x12f/0x1d0 [ 1946.341899] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1946.342255] ? down_read+0x1a0/0x450 [ 1946.342524] ? __pfx___up_read+0x10/0x10 [ 1946.342826] device_create_file+0xee/0x1e0 [ 1946.343152] device_add+0x4c6/0x1ec0 [ 1946.343438] ? dev_set_name+0xbf/0x100 [ 1946.343734] ? __pfx_dev_set_name+0x10/0x10 [ 1946.344065] ? __pfx_device_add+0x10/0x10 [ 1946.344373] ? __init_waitqueue_head+0xca/0x150 [ 1946.344727] netdev_register_kobject+0x17e/0x3b0 [ 1946.345089] register_netdevice+0xd60/0x1530 [ 1946.345432] ? __pfx_register_netdevice+0x10/0x10 [ 1946.345798] ? dev_addr_mod+0x29e/0x350 [ 1946.346094] __tun_chr_ioctl+0x210b/0x3f80 [ 1946.346411] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1946.346750] ? __pfx___fget_files+0x10/0x10 [ 1946.347081] ? lock_acquire+0x32/0xc0 [ 1946.347383] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1946.347713] __x64_sys_ioctl+0x19e/0x210 [ 1946.348024] do_syscall_64+0x3f/0x90 [ 1946.348313] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1946.348696] RIP: 0033:0x7f59fcc15b19 [ 1946.348974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1946.350250] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1946.350799] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1946.351313] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1946.351824] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1946.352344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1946.352862] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1946.353406] [ 1946.377647] FAULT_INJECTION: forcing a failure. [ 1946.377647] name failslab, interval 1, probability 0, space 0, times 0 [ 1946.378610] CPU: 1 PID: 10261 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1946.379195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1946.379763] Call Trace: [ 1946.379953] [ 1946.380130] dump_stack_lvl+0x8f/0xb7 [ 1946.380426] should_fail_ex.cold+0x5/0xa [ 1946.380722] ? __kernfs_new_node+0xd4/0x8c0 [ 1946.381047] should_failslab+0x9/0x20 [ 1946.381320] kmem_cache_alloc+0x5a/0x410 [ 1946.381618] __kernfs_new_node+0xd4/0x8c0 [ 1946.381918] ? lock_release+0x3b6/0x750 [ 1946.382201] ? __pfx___kernfs_new_node+0x10/0x10 [ 1946.382535] ? __pfx_lock_release+0x10/0x10 [ 1946.382844] ? lock_acquire+0x32/0xc0 [ 1946.383166] ? up_write+0x1b0/0x520 [ 1946.383455] kernfs_new_node+0x97/0x120 [ 1946.383750] __kernfs_create_file+0x55/0x350 [ 1946.384073] sysfs_add_file_mode_ns+0x21c/0x440 [ 1946.384430] ? __pfx_dev_attr_store+0x10/0x10 [ 1946.384758] internal_create_group+0x322/0xb20 [ 1946.385107] ? __pfx_internal_create_group+0x10/0x10 [ 1946.385489] ? kernfs_add_one+0x17a/0x4f0 [ 1946.385810] ? kernfs_create_link+0x1bb/0x240 [ 1946.386144] internal_create_groups.part.0+0x90/0x140 [ 1946.386543] sysfs_create_groups+0x29/0x50 [ 1946.386861] device_add+0x711/0x1ec0 [ 1946.387163] ? __pfx_dev_set_name+0x10/0x10 [ 1946.387494] ? __pfx_device_add+0x10/0x10 [ 1946.387807] ? __init_waitqueue_head+0xca/0x150 [ 1946.388165] netdev_register_kobject+0x17e/0x3b0 [ 1946.388524] register_netdevice+0xd60/0x1530 [ 1946.388862] ? __pfx_register_netdevice+0x10/0x10 [ 1946.389222] ? dev_addr_mod+0x29e/0x350 [ 1946.389504] __tun_chr_ioctl+0x210b/0x3f80 [ 1946.389825] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1946.390160] ? __pfx___fget_files+0x10/0x10 [ 1946.390480] ? lock_acquire+0x32/0xc0 [ 1946.390772] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1946.391125] __x64_sys_ioctl+0x19e/0x210 [ 1946.391429] do_syscall_64+0x3f/0x90 [ 1946.391720] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1946.392106] RIP: 0033:0x7f2e2b599b19 [ 1946.392376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1946.393665] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1946.394230] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1946.394744] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1946.395263] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1946.395764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1946.396280] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1946.396805] [ 1946.409500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1946.425147] Invalid ELF header magic: != ELF [ 1946.496149] Invalid ELF header magic: != ELF [ 1946.504165] FAULT_INJECTION: forcing a failure. [ 1946.504165] name failslab, interval 1, probability 0, space 0, times 0 [ 1946.506127] CPU: 0 PID: 10258 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1946.506922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1946.507717] Call Trace: 04:56:19 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%\n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1946.507982] [ 1946.508305] dump_stack_lvl+0x8f/0xb7 [ 1946.508725] should_fail_ex.cold+0x5/0xa [ 1946.509152] ? __kernfs_new_node+0xd4/0x8c0 [ 1946.509600] should_failslab+0x9/0x20 [ 1946.510002] kmem_cache_alloc+0x5a/0x410 [ 1946.510432] __kernfs_new_node+0xd4/0x8c0 [ 1946.510868] ? lock_release+0x3b6/0x750 [ 1946.511294] ? __pfx___kernfs_new_node+0x10/0x10 [ 1946.511787] ? __pfx_lock_release+0x10/0x10 [ 1946.512233] ? lock_acquire+0x32/0xc0 [ 1946.512661] ? up_write+0x1b0/0x520 [ 1946.513065] kernfs_new_node+0x97/0x120 [ 1946.513505] __kernfs_create_file+0x55/0x350 [ 1946.513961] sysfs_add_file_mode_ns+0x21c/0x440 [ 1946.514453] ? __pfx_dev_attr_store+0x10/0x10 [ 1946.514933] internal_create_group+0x322/0xb20 [ 1946.515428] ? __pfx_internal_create_group+0x10/0x10 [ 1946.515958] ? kernfs_add_one+0x17a/0x4f0 [ 1946.516406] ? kernfs_create_link+0x1bb/0x240 [ 1946.516877] internal_create_groups.part.0+0x90/0x140 [ 1946.517419] sysfs_create_groups+0x29/0x50 [ 1946.517870] device_add+0x711/0x1ec0 [ 1946.518273] ? __pfx_dev_set_name+0x10/0x10 [ 1946.518731] ? __pfx_device_add+0x10/0x10 [ 1946.519199] ? __init_waitqueue_head+0xca/0x150 [ 1946.519693] netdev_register_kobject+0x17e/0x3b0 [ 1946.520198] register_netdevice+0xd60/0x1530 [ 1946.520666] ? __pfx_register_netdevice+0x10/0x10 [ 1946.521169] ? dev_addr_mod+0x29e/0x350 [ 1946.521584] __tun_chr_ioctl+0x210b/0x3f80 [ 1946.522027] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1946.522495] ? __pfx___fget_files+0x10/0x10 [ 1946.522944] ? lock_acquire+0x32/0xc0 [ 1946.523375] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1946.523831] __x64_sys_ioctl+0x19e/0x210 [ 1946.524253] do_syscall_64+0x3f/0x90 [ 1946.524648] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1946.525175] RIP: 0033:0x7ff461a5bb19 [ 1946.525547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1946.527282] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1946.528023] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1946.528718] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1946.529410] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1946.530097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1946.530785] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1946.531504] [ 1946.549576] FAULT_INJECTION: forcing a failure. [ 1946.549576] name failslab, interval 1, probability 0, space 0, times 0 [ 1946.551151] CPU: 0 PID: 10260 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1946.551986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1946.552804] Call Trace: [ 1946.553073] [ 1946.553314] dump_stack_lvl+0x8f/0xb7 [ 1946.553732] should_fail_ex.cold+0x5/0xa [ 1946.554177] ? __kernfs_new_node+0xd4/0x8c0 [ 1946.554634] should_failslab+0x9/0x20 [ 1946.555054] kmem_cache_alloc+0x5a/0x410 [ 1946.555493] __kernfs_new_node+0xd4/0x8c0 [ 1946.555937] ? lock_release+0x3b6/0x750 [ 1946.556359] ? __pfx___kernfs_new_node+0x10/0x10 [ 1946.556872] ? __pfx_lock_release+0x10/0x10 [ 1946.557320] ? lock_acquire+0x32/0xc0 [ 1946.557757] ? up_write+0x1b0/0x520 [ 1946.558165] kernfs_new_node+0x97/0x120 [ 1946.558600] __kernfs_create_file+0x55/0x350 [ 1946.559090] sysfs_add_file_mode_ns+0x21c/0x440 [ 1946.559591] ? __pfx_dev_attr_store+0x10/0x10 [ 1946.560087] internal_create_group+0x322/0xb20 [ 1946.560580] ? __pfx_internal_create_group+0x10/0x10 [ 1946.561115] ? kernfs_add_one+0x17a/0x4f0 [ 1946.561573] ? kernfs_create_link+0x1bb/0x240 [ 1946.562047] internal_create_groups.part.0+0x90/0x140 [ 1946.562600] sysfs_create_groups+0x29/0x50 [ 1946.563054] device_add+0x711/0x1ec0 [ 1946.563450] ? __pfx_dev_set_name+0x10/0x10 [ 1946.563909] ? __pfx_device_add+0x10/0x10 [ 1946.564349] ? __init_waitqueue_head+0xca/0x150 [ 1946.564863] netdev_register_kobject+0x17e/0x3b0 [ 1946.565369] register_netdevice+0xd60/0x1530 [ 1946.565859] ? __pfx_register_netdevice+0x10/0x10 [ 1946.566378] ? dev_addr_mod+0x29e/0x350 [ 1946.566817] __tun_chr_ioctl+0x210b/0x3f80 [ 1946.567289] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1946.567773] ? __pfx___fget_files+0x10/0x10 [ 1946.568220] ? lock_acquire+0x32/0xc0 [ 1946.568647] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1946.569118] __x64_sys_ioctl+0x19e/0x210 [ 1946.569552] do_syscall_64+0x3f/0x90 [ 1946.569960] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1946.570504] RIP: 0033:0x7fcb82d36b19 [ 1946.570889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1946.572703] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1946.573467] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1946.574181] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1946.574900] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1946.575638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1946.576369] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1946.577145] [ 1946.600330] Invalid ELF header magic: != ELF 04:56:19 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k:\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:56:19 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 67) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:19 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 51) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:19 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 63) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:19 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) [ 1946.691842] Invalid ELF header magic: != ELF [ 1946.830250] FAULT_INJECTION: forcing a failure. [ 1946.830250] name failslab, interval 1, probability 0, space 0, times 0 [ 1946.832099] CPU: 0 PID: 10291 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1946.832929] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1946.833756] Call Trace: [ 1946.834028] [ 1946.834274] dump_stack_lvl+0x8f/0xb7 [ 1946.834704] should_fail_ex.cold+0x5/0xa [ 1946.835166] ? __kernfs_new_node+0xd4/0x8c0 [ 1946.835637] should_failslab+0x9/0x20 [ 1946.836055] kmem_cache_alloc+0x5a/0x410 [ 1946.836501] __kernfs_new_node+0xd4/0x8c0 [ 1946.836950] ? lock_release+0x3b6/0x750 [ 1946.837376] ? __pfx___kernfs_new_node+0x10/0x10 [ 1946.837889] ? __pfx_lock_release+0x10/0x10 [ 1946.838343] ? lock_acquire+0x32/0xc0 [ 1946.838773] ? up_write+0x1b0/0x520 [ 1946.839202] kernfs_new_node+0x97/0x120 [ 1946.839660] __kernfs_create_file+0x55/0x350 [ 1946.840150] sysfs_add_file_mode_ns+0x21c/0x440 [ 1946.840668] ? __pfx_dev_attr_store+0x10/0x10 [ 1946.841167] internal_create_group+0x322/0xb20 [ 1946.841693] ? __pfx_internal_create_group+0x10/0x10 [ 1946.842251] ? kernfs_add_one+0x17a/0x4f0 [ 1946.842718] ? kernfs_create_link+0x1bb/0x240 [ 1946.843238] internal_create_groups.part.0+0x90/0x140 [ 1946.843814] sysfs_create_groups+0x29/0x50 [ 1946.844293] device_add+0x711/0x1ec0 [ 1946.844712] ? __pfx_dev_set_name+0x10/0x10 [ 1946.845193] ? __pfx_device_add+0x10/0x10 [ 1946.845654] ? __init_waitqueue_head+0xca/0x150 [ 1946.846182] netdev_register_kobject+0x17e/0x3b0 [ 1946.846720] register_netdevice+0xd60/0x1530 [ 1946.847226] ? __pfx_register_netdevice+0x10/0x10 [ 1946.847762] ? dev_addr_mod+0x29e/0x350 [ 1946.848214] __tun_chr_ioctl+0x210b/0x3f80 [ 1946.848688] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1946.849195] ? __pfx___fget_files+0x10/0x10 [ 1946.849668] ? lock_acquire+0x32/0xc0 [ 1946.850118] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1946.850611] __x64_sys_ioctl+0x19e/0x210 [ 1946.851077] do_syscall_64+0x3f/0x90 [ 1946.851497] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1946.852074] RIP: 0033:0x7f59fcc15b19 [ 1946.852481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1946.854359] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1946.855184] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1946.855939] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1946.856693] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1946.857447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1946.858194] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1946.858973] 04:56:31 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:31 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) (fail_nth: 1) 04:56:31 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=ANY=[@ANYBLOB="500000000802110000000802110000015050505050500000030100000001000000"], 0x21) 04:56:31 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 52) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:31 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6:\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:56:31 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 68) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:31 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) 04:56:31 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 61) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1958.330473] FAULT_INJECTION: forcing a failure. [ 1958.330473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1958.332096] CPU: 1 PID: 10306 Comm: syz-executor.7 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1958.333115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1958.334139] Call Trace: [ 1958.334467] [ 1958.334771] dump_stack_lvl+0x8f/0xb7 [ 1958.335300] should_fail_ex.cold+0x5/0xa [ 1958.335844] _copy_from_user+0x2e/0x180 [ 1958.336367] inet6_ioctl+0x21e/0x290 [ 1958.336872] ? __pfx_inet6_ioctl+0x10/0x10 [ 1958.337460] ? find_held_lock+0x2c/0x110 [ 1958.338002] sock_do_ioctl+0xd2/0x240 [ 1958.338515] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1958.339086] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1958.339670] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1958.340403] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x410 [ 1958.341152] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1958.341972] sock_ioctl+0x424/0x670 [ 1958.342494] ? __pfx_sock_ioctl+0x10/0x10 [ 1958.343057] ? selinux_file_ioctl+0xb5/0x260 [ 1958.343637] ? __pfx_sock_ioctl+0x10/0x10 [ 1958.344186] __x64_sys_ioctl+0x19e/0x210 [ 1958.344715] do_syscall_64+0x3f/0x90 [ 1958.345221] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1958.345855] RIP: 0033:0x7f0dca326b19 [ 1958.346344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1958.348622] RSP: 002b:00007f0dc789c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1958.349560] RAX: ffffffffffffffda RBX: 00007f0dca439f60 RCX: 00007f0dca326b19 [ 1958.350439] RDX: 0000000020000380 RSI: 000000000000890b RDI: 0000000000000003 [ 1958.351345] RBP: 00007f0dc789c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1958.352237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1958.353163] R13: 00007fff04f265cf R14: 00007f0dc789c300 R15: 0000000000022000 [ 1958.354062] [ 1958.377170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:56:31 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) (fail_nth: 2) [ 1958.395176] FAULT_INJECTION: forcing a failure. [ 1958.395176] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.396567] CPU: 0 PID: 10308 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1958.397127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1958.397684] Call Trace: [ 1958.397865] [ 1958.398030] dump_stack_lvl+0x8f/0xb7 [ 1958.398316] should_fail_ex.cold+0x5/0xa [ 1958.398610] ? __kernfs_new_node+0xd4/0x8c0 [ 1958.398921] should_failslab+0x9/0x20 [ 1958.399199] kmem_cache_alloc+0x5a/0x410 [ 1958.399493] __kernfs_new_node+0xd4/0x8c0 [ 1958.399795] ? lock_release+0x3b6/0x750 [ 1958.400088] ? __pfx___kernfs_new_node+0x10/0x10 [ 1958.400433] ? __pfx_lock_release+0x10/0x10 [ 1958.400740] ? lock_acquire+0x32/0xc0 [ 1958.401043] ? up_write+0x1b0/0x520 [ 1958.401319] kernfs_new_node+0x97/0x120 [ 1958.401622] __kernfs_create_file+0x55/0x350 [ 1958.401940] sysfs_add_file_mode_ns+0x21c/0x440 [ 1958.402265] ? __pfx_dev_attr_store+0x10/0x10 [ 1958.402594] internal_create_group+0x322/0xb20 [ 1958.402921] ? __pfx_internal_create_group+0x10/0x10 [ 1958.403296] ? internal_create_group+0x9/0xb20 [ 1958.403630] internal_create_groups.part.0+0x90/0x140 [ 1958.404006] sysfs_create_groups+0x29/0x50 [ 1958.404318] device_add+0x711/0x1ec0 [ 1958.404590] ? __pfx_dev_set_name+0x10/0x10 [ 1958.404917] ? __pfx_device_add+0x10/0x10 [ 1958.405228] ? __init_waitqueue_head+0xca/0x150 [ 1958.405589] netdev_register_kobject+0x17e/0x3b0 [ 1958.405951] register_netdevice+0xd60/0x1530 [ 1958.406266] ? __pfx_register_netdevice+0x10/0x10 [ 1958.406628] ? dev_addr_mod+0x29e/0x350 [ 1958.406927] __tun_chr_ioctl+0x210b/0x3f80 [ 1958.407257] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1958.407593] ? __pfx___fget_files+0x10/0x10 [ 1958.407915] ? lock_acquire+0x32/0xc0 [ 1958.408212] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1958.408543] __x64_sys_ioctl+0x19e/0x210 [ 1958.408848] do_syscall_64+0x3f/0x90 [ 1958.409134] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1958.409521] RIP: 0033:0x7ff461a5bb19 [ 1958.409803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1958.411066] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1958.411619] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1958.412123] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1958.412632] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1958.413149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1958.413654] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1958.414175] [ 1958.417033] Invalid ELF header magic: != ELF 04:56:31 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xe13}}, './file0\x00'}) [ 1958.485301] FAULT_INJECTION: forcing a failure. [ 1958.485301] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.486300] CPU: 0 PID: 10311 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1958.486883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1958.487470] Call Trace: [ 1958.487660] [ 1958.487830] dump_stack_lvl+0x8f/0xb7 [ 1958.488125] should_fail_ex.cold+0x5/0xa [ 1958.488433] ? __kernfs_new_node+0xd4/0x8c0 [ 1958.488758] should_failslab+0x9/0x20 [ 1958.489046] kmem_cache_alloc+0x5a/0x410 [ 1958.489361] __kernfs_new_node+0xd4/0x8c0 [ 1958.489678] ? lock_release+0x3b6/0x750 [ 1958.489984] ? __pfx___kernfs_new_node+0x10/0x10 [ 1958.490345] ? __pfx_lock_release+0x10/0x10 [ 1958.490663] ? lock_acquire+0x32/0xc0 [ 1958.490967] ? up_write+0x1b0/0x520 [ 1958.491265] kernfs_new_node+0x97/0x120 [ 1958.491582] __kernfs_create_file+0x55/0x350 [ 1958.491915] sysfs_add_file_mode_ns+0x21c/0x440 [ 1958.492262] ? __pfx_dev_attr_store+0x10/0x10 [ 1958.492603] internal_create_group+0x322/0xb20 [ 1958.492948] ? __pfx_internal_create_group+0x10/0x10 [ 1958.493319] ? kernfs_add_one+0x17a/0x4f0 [ 1958.493632] ? kernfs_create_link+0x1bb/0x240 [ 1958.493977] internal_create_groups.part.0+0x90/0x140 [ 1958.494362] sysfs_create_groups+0x29/0x50 [ 1958.494682] device_add+0x711/0x1ec0 [ 1958.494967] ? __pfx_dev_set_name+0x10/0x10 [ 1958.495274] ? __pfx_device_add+0x10/0x10 [ 1958.495590] ? __init_waitqueue_head+0xca/0x150 [ 1958.495941] netdev_register_kobject+0x17e/0x3b0 [ 1958.496298] register_netdevice+0xd60/0x1530 [ 1958.496635] ? __pfx_register_netdevice+0x10/0x10 [ 1958.496994] ? dev_addr_mod+0x29e/0x350 [ 1958.497292] __tun_chr_ioctl+0x210b/0x3f80 [ 1958.497617] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1958.497960] ? __pfx___fget_files+0x10/0x10 [ 1958.498276] ? lock_acquire+0x32/0xc0 [ 1958.498580] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1958.498909] __x64_sys_ioctl+0x19e/0x210 [ 1958.499216] do_syscall_64+0x3f/0x90 [ 1958.499501] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1958.499885] RIP: 0033:0x7fcb82d36b19 [ 1958.500159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1958.501424] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1958.501975] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1958.502487] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1958.502997] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1958.503517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1958.504024] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1958.504551] [ 1958.532608] FAULT_INJECTION: forcing a failure. [ 1958.532608] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.534208] CPU: 0 PID: 10307 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1958.534767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1958.535328] Call Trace: [ 1958.535510] [ 1958.535672] dump_stack_lvl+0x8f/0xb7 [ 1958.535957] should_fail_ex.cold+0x5/0xa [ 1958.536246] ? __kernfs_new_node+0xd4/0x8c0 [ 1958.536552] should_failslab+0x9/0x20 [ 1958.536826] kmem_cache_alloc+0x5a/0x410 [ 1958.537123] __kernfs_new_node+0xd4/0x8c0 [ 1958.537428] ? lock_release+0x3b6/0x750 [ 1958.537708] ? __pfx___kernfs_new_node+0x10/0x10 [ 1958.538044] ? __pfx_lock_release+0x10/0x10 [ 1958.538345] ? lock_acquire+0x32/0xc0 [ 1958.538628] ? up_write+0x1b0/0x520 [ 1958.538902] kernfs_new_node+0x97/0x120 [ 1958.539208] __kernfs_create_file+0x55/0x350 [ 1958.539515] sysfs_add_file_mode_ns+0x21c/0x440 [ 1958.539842] ? __pfx_dev_attr_store+0x10/0x10 [ 1958.540169] internal_create_group+0x322/0xb20 [ 1958.540510] ? __pfx_internal_create_group+0x10/0x10 [ 1958.540869] ? kernfs_add_one+0x17a/0x4f0 [ 1958.541169] ? kernfs_create_link+0x1bb/0x240 [ 1958.541496] internal_create_groups.part.0+0x90/0x140 [ 1958.541863] sysfs_create_groups+0x29/0x50 [ 1958.542161] device_add+0x711/0x1ec0 [ 1958.542431] ? __pfx_dev_set_name+0x10/0x10 [ 1958.542746] ? __pfx_device_add+0x10/0x10 [ 1958.543045] ? __init_waitqueue_head+0xca/0x150 [ 1958.543389] netdev_register_kobject+0x17e/0x3b0 [ 1958.543747] register_netdevice+0xd60/0x1530 [ 1958.544076] ? __pfx_register_netdevice+0x10/0x10 [ 1958.544446] ? dev_addr_mod+0x29e/0x350 [ 1958.544749] __tun_chr_ioctl+0x210b/0x3f80 [ 1958.545067] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1958.545406] ? __pfx___fget_files+0x10/0x10 [ 1958.545728] ? lock_acquire+0x32/0xc0 [ 1958.546033] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1958.546338] __x64_sys_ioctl+0x19e/0x210 [ 1958.546653] do_syscall_64+0x3f/0x90 [ 1958.546930] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1958.547331] RIP: 0033:0x7f59fcc15b19 [ 1958.547604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1958.548880] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1958.549419] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 1958.549926] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1958.550433] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1958.550945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1958.551463] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 1958.551988] [ 1958.584346] FAULT_INJECTION: forcing a failure. [ 1958.584346] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.586320] CPU: 1 PID: 10313 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1958.587279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1958.588221] Call Trace: [ 1958.588534] [ 1958.588821] dump_stack_lvl+0x8f/0xb7 [ 1958.589308] should_fail_ex.cold+0x5/0xa [ 1958.589808] ? __kernfs_new_node+0xd4/0x8c0 [ 1958.590344] should_failslab+0x9/0x20 [ 1958.590815] kmem_cache_alloc+0x5a/0x410 [ 1958.591339] __kernfs_new_node+0xd4/0x8c0 [ 1958.591854] ? lock_release+0x3b6/0x750 [ 1958.592383] ? __pfx___kernfs_new_node+0x10/0x10 [ 1958.593021] ? __pfx_lock_release+0x10/0x10 [ 1958.593571] ? lock_acquire+0x32/0xc0 [ 1958.594099] ? up_write+0x1b0/0x520 [ 1958.594595] kernfs_new_node+0x97/0x120 [ 1958.595154] __kernfs_create_file+0x55/0x350 [ 1958.595747] sysfs_add_file_mode_ns+0x21c/0x440 [ 1958.596378] ? __pfx_dev_attr_store+0x10/0x10 [ 1958.596979] internal_create_group+0x322/0xb20 [ 1958.597591] ? __pfx_internal_create_group+0x10/0x10 [ 1958.598253] ? kernfs_add_one+0x17a/0x4f0 [ 1958.598836] ? kernfs_create_link+0x1bb/0x240 [ 1958.599446] internal_create_groups.part.0+0x90/0x140 [ 1958.600144] sysfs_create_groups+0x29/0x50 [ 1958.600699] device_add+0x711/0x1ec0 [ 1958.601196] ? __pfx_dev_set_name+0x10/0x10 [ 1958.601759] ? __pfx_device_add+0x10/0x10 [ 1958.602305] ? __init_waitqueue_head+0xca/0x150 [ 1958.602930] netdev_register_kobject+0x17e/0x3b0 [ 1958.603590] register_netdevice+0xd60/0x1530 [ 1958.604176] ? __pfx_register_netdevice+0x10/0x10 [ 1958.604810] ? dev_addr_mod+0x29e/0x350 [ 1958.605325] __tun_chr_ioctl+0x210b/0x3f80 [ 1958.605902] ? irqentry_enter+0x2a/0x60 [ 1958.606446] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1958.607063] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1958.607810] ? lockdep_hardirqs_on+0x7d/0x100 [ 1958.608417] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1958.609134] ? tun_chr_ioctl+0x17/0x30 [ 1958.609644] ? __sanitizer_cov_trace_pc+0x60/0x70 [ 1958.610278] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1958.610884] __x64_sys_ioctl+0x19e/0x210 [ 1958.611434] do_syscall_64+0x3f/0x90 [ 1958.611938] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1958.612038] Invalid ELF header magic: != ELF [ 1958.612593] RIP: 0033:0x7f2e2b599b19 [ 1958.612619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1958.615756] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1958.616690] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 1958.617565] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1958.618448] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1958.619365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1958.620248] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 1958.621182] [ 1958.642796] FAULT_INJECTION: forcing a failure. [ 1958.642796] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.643665] CPU: 0 PID: 10322 Comm: syz-executor.7 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1958.644272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1958.645066] Call Trace: [ 1958.645326] [ 1958.645552] dump_stack_lvl+0x8f/0xb7 [ 1958.645946] should_fail_ex.cold+0x5/0xa [ 1958.646365] should_failslab+0x9/0x20 [ 1958.646756] __kmem_cache_alloc_node+0x5b/0x400 [ 1958.647248] ? fib6_info_alloc+0xc0/0x1f0 [ 1958.647678] kmalloc_trace+0x26/0x60 [ 1958.648068] fib6_info_alloc+0xc0/0x1f0 [ 1958.648483] ip6_route_info_create+0x363/0x1a20 [ 1958.648956] ? __pfx_ip6_route_info_create+0x10/0x10 [ 1958.649448] ? cap_capable+0x1da/0x240 [ 1958.649860] ip6_route_add+0x28/0x150 [ 1958.650250] ipv6_route_ioctl+0x3a7/0x510 [ 1958.650661] ? __pfx_lock_release+0x10/0x10 [ 1958.651093] ? trace_lock_acquire+0x14c/0x1c0 [ 1958.651556] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 1958.652026] ? find_held_lock+0x2c/0x110 [ 1958.652447] ? __might_fault+0xa9/0x180 [ 1958.652876] inet6_ioctl+0x24c/0x290 [ 1958.653262] ? __pfx_inet6_ioctl+0x10/0x10 [ 1958.653704] ? find_held_lock+0x2c/0x110 [ 1958.654114] sock_do_ioctl+0xd2/0x240 [ 1958.654506] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1958.654949] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1958.655402] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1958.655965] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x410 [ 1958.656452] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1958.656896] sock_ioctl+0x424/0x670 [ 1958.657173] ? __pfx_sock_ioctl+0x10/0x10 [ 1958.657492] ? selinux_file_ioctl+0xb5/0x260 [ 1958.657825] ? __pfx_sock_ioctl+0x10/0x10 [ 1958.658136] __x64_sys_ioctl+0x19e/0x210 [ 1958.658444] do_syscall_64+0x3f/0x90 [ 1958.658730] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1958.659111] RIP: 0033:0x7f0dca326b19 [ 1958.659376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1958.660653] RSP: 002b:00007f0dc789c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1958.661193] RAX: ffffffffffffffda RBX: 00007f0dca439f60 RCX: 00007f0dca326b19 [ 1958.661693] RDX: 0000000020000380 RSI: 000000000000890b RDI: 0000000000000003 [ 1958.662199] RBP: 00007f0dc789c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1958.662710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1958.663228] R13: 00007fff04f265cf R14: 00007f0dc789c300 R15: 0000000000022000 [ 1958.663755] [ 1958.683155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:56:31 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 65) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:31 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed:\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:56:31 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 62) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:31 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/acpi', 0x800, 0x0) recvmmsg$unix(r0, &(0x7f0000005d00)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000180)=""/219, 0xdb}], 0x2, &(0x7f00000002c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x178}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/190, 0xbe}, {&(0x7f00000017c0)=""/27, 0x1b}], 0x5, &(0x7f0000005f00)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="100000000000000001000000cb000000c27ca6d256a193d21dd54e39282835e8b116202aee6fa9f9abf707f6c5629b89ac09000000000000002027b119a1d608ac3923d43a9f7473379e613a9448914021e5a25909a4974135b6391edc8cfe9b7b81da45880db20793f616b68ad6458e1febbdca976192f85a053a04c25f2cc2e489e94eeaafbc394813735363b2dd920b192dff777c09574d2f9df6443b09e5c4b4e6903f8151af77915298772b11020000003aea5a3f831ae781e6"], 0x68}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001900)=""/81, 0x51}, {&(0x7f0000001980)=""/105, 0x69}, {&(0x7f0000001a00)=""/47, 0x2f}, {&(0x7f0000001a40)=""/56, 0x38}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x5, &(0x7f0000002b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002b80)=@abs, 0x6e, &(0x7f0000005040)=[{&(0x7f0000002c00)=""/134, 0x86}, {&(0x7f0000002cc0)=""/103, 0x67}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/128, 0x80}, {&(0x7f0000003dc0)=""/167, 0xa7}, {&(0x7f0000003e80)=""/92, 0x5c}, {&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/152, 0x98}, {&(0x7f0000004fc0)=""/7, 0x7}, {&(0x7f0000005000)=""/35, 0x23}], 0xa, &(0x7f0000005f00)}}, {{&(0x7f00000051c0), 0x6e, &(0x7f0000005640)=[{&(0x7f0000005240)=""/15, 0xf}, {&(0x7f0000005280)=""/119, 0x77}, {&(0x7f0000005300)=""/63, 0x3f}, {&(0x7f0000005340)=""/55, 0x37}, {&(0x7f0000005380)=""/145, 0x91}, {&(0x7f0000005440)=""/207, 0xcf}, {&(0x7f0000005540)=""/242, 0xf2}], 0x7, &(0x7f00000056c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000005700)=@abs, 0x6e, &(0x7f0000005bc0)=[{&(0x7f0000005780)=""/19, 0x13}, {&(0x7f00000057c0)=""/211, 0xd3}, {&(0x7f00000058c0)=""/147, 0x93}, {&(0x7f0000005980)=""/55, 0x37}, {&(0x7f00000059c0)=""/201, 0xc9}, {&(0x7f0000005ac0)=""/220, 0xdc}], 0x6, &(0x7f0000005c40)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x7, 0x100, &(0x7f0000005ec0)) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000004c0)={{r2}, {@void, @actul_num={@val=0x2b, 0xa8, 0x1f}}}) 04:56:31 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) (fail_nth: 3) 04:56:32 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 69) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:32 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1}}}}, 0x21) 04:56:32 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) (fail_nth: 4) [ 1958.849397] FAULT_INJECTION: forcing a failure. [ 1958.849397] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.850478] CPU: 0 PID: 10334 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1958.851035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1958.851608] Call Trace: [ 1958.851795] [ 1958.851964] dump_stack_lvl+0x8f/0xb7 [ 1958.852257] should_fail_ex.cold+0x5/0xa [ 1958.852552] ? __kernfs_new_node+0xd4/0x8c0 [ 1958.852860] should_failslab+0x9/0x20 [ 1958.853135] kmem_cache_alloc+0x5a/0x410 [ 1958.853435] __kernfs_new_node+0xd4/0x8c0 [ 1958.853736] ? lock_release+0x3b6/0x750 [ 1958.854027] ? __pfx___kernfs_new_node+0x10/0x10 [ 1958.854372] ? __pfx_lock_release+0x10/0x10 [ 1958.854681] ? lock_acquire+0x32/0xc0 [ 1958.854969] ? up_write+0x1b0/0x520 [ 1958.855251] kernfs_new_node+0x97/0x120 [ 1958.855548] __kernfs_create_file+0x55/0x350 [ 1958.855873] sysfs_add_file_mode_ns+0x21c/0x440 [ 1958.856205] ? __pfx_dev_attr_store+0x10/0x10 [ 1958.856535] internal_create_group+0x322/0xb20 [ 1958.856869] ? __pfx_internal_create_group+0x10/0x10 [ 1958.857221] ? kernfs_add_one+0x17a/0x4f0 [ 1958.857535] ? kernfs_create_link+0x1bb/0x240 [ 1958.857854] internal_create_groups.part.0+0x90/0x140 [ 1958.858214] sysfs_create_groups+0x29/0x50 [ 1958.858520] device_add+0x711/0x1ec0 [ 1958.858795] ? __pfx_dev_set_name+0x10/0x10 [ 1958.859131] ? __pfx_device_add+0x10/0x10 [ 1958.859428] ? __init_waitqueue_head+0xca/0x150 [ 1958.859785] netdev_register_kobject+0x17e/0x3b0 [ 1958.859991] Invalid ELF header magic: != ELF [ 1958.860115] register_netdevice+0xd60/0x1530 [ 1958.861056] ? __pfx_register_netdevice+0x10/0x10 [ 1958.861397] ? dev_addr_mod+0x29e/0x350 [ 1958.861676] __tun_chr_ioctl+0x210b/0x3f80 [ 1958.861983] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1958.862303] ? __pfx___fget_files+0x10/0x10 [ 1958.862607] ? lock_acquire+0x32/0xc0 [ 1958.862912] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1958.863227] __x64_sys_ioctl+0x19e/0x210 [ 1958.863512] do_syscall_64+0x3f/0x90 [ 1958.863779] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1958.864135] RIP: 0033:0x7fcb82d36b19 [ 1958.864396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1958.865560] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1958.866064] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1958.866529] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1958.866998] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1958.867467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1958.867957] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1958.868469] [ 1958.881984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:56:32 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 53) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:32 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r3, r2, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r4 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, 0x0) [ 1958.912531] Invalid ELF header magic: != ELF [ 1958.930132] FAULT_INJECTION: forcing a failure. [ 1958.930132] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.931367] CPU: 0 PID: 10335 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1958.931923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1958.932469] Call Trace: [ 1958.932655] [ 1958.932820] dump_stack_lvl+0x8f/0xb7 [ 1958.933106] should_fail_ex.cold+0x5/0xa [ 1958.933399] ? __kernfs_new_node+0xd4/0x8c0 [ 1958.933708] should_failslab+0x9/0x20 [ 1958.933981] kmem_cache_alloc+0x5a/0x410 [ 1958.934276] __kernfs_new_node+0xd4/0x8c0 [ 1958.934574] ? lock_release+0x3b6/0x750 [ 1958.934864] ? __pfx___kernfs_new_node+0x10/0x10 [ 1958.935207] ? __pfx_lock_release+0x10/0x10 [ 1958.935511] ? lock_acquire+0x32/0xc0 [ 1958.935804] ? up_write+0x1b0/0x520 [ 1958.936079] kernfs_new_node+0x97/0x120 [ 1958.936377] __kernfs_create_file+0x55/0x350 [ 1958.936696] sysfs_add_file_mode_ns+0x21c/0x440 [ 1958.937023] ? __pfx_dev_attr_store+0x10/0x10 [ 1958.937345] internal_create_group+0x322/0xb20 [ 1958.937679] ? __pfx_internal_create_group+0x10/0x10 [ 1958.938028] ? kernfs_add_one+0x17a/0x4f0 [ 1958.938336] ? kernfs_create_link+0x1bb/0x240 [ 1958.938651] internal_create_groups.part.0+0x90/0x140 [ 1958.939019] sysfs_create_groups+0x29/0x50 [ 1958.939328] device_add+0x711/0x1ec0 [ 1958.939598] ? __pfx_dev_set_name+0x10/0x10 [ 1958.939905] ? __pfx_device_add+0x10/0x10 [ 1958.940200] ? __init_waitqueue_head+0xca/0x150 [ 1958.940533] netdev_register_kobject+0x17e/0x3b0 [ 1958.940879] register_netdevice+0xd60/0x1530 [ 1958.941196] ? __pfx_register_netdevice+0x10/0x10 [ 1958.941542] ? dev_addr_mod+0x29e/0x350 [ 1958.941827] __tun_chr_ioctl+0x210b/0x3f80 [ 1958.942138] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1958.942467] ? __pfx___fget_files+0x10/0x10 [ 1958.942780] ? lock_acquire+0x32/0xc0 [ 1958.943067] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1958.943394] __x64_sys_ioctl+0x19e/0x210 [ 1958.943688] do_syscall_64+0x3f/0x90 [ 1958.943959] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1958.944328] RIP: 0033:0x7ff461a5bb19 [ 1958.944583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1958.945783] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1958.946286] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1958.946771] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1958.947266] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1958.947761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1958.948245] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1958.948750] 04:56:32 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\t\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:56:32 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) (fail_nth: 5) 04:56:32 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 63) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 1959.137444] Invalid ELF header magic: != ELF [ 1959.250214] FAULT_INJECTION: forcing a failure. [ 1959.250214] name failslab, interval 1, probability 0, space 0, times 0 [ 1959.252225] CPU: 1 PID: 10360 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1959.253196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1959.254160] Call Trace: [ 1959.254485] [ 1959.254768] dump_stack_lvl+0x8f/0xb7 [ 1959.255290] should_fail_ex.cold+0x5/0xa [ 1959.255800] ? __kernfs_new_node+0xd4/0x8c0 [ 1959.256341] should_failslab+0x9/0x20 [ 1959.256830] kmem_cache_alloc+0x5a/0x410 [ 1959.257344] __kernfs_new_node+0xd4/0x8c0 [ 1959.257859] ? lock_release+0x3b6/0x750 [ 1959.258362] ? __pfx___kernfs_new_node+0x10/0x10 [ 1959.258947] ? __pfx_lock_release+0x10/0x10 [ 1959.259491] ? lock_acquire+0x32/0xc0 [ 1959.259992] ? up_write+0x1b0/0x520 [ 1959.260469] kernfs_new_node+0x97/0x120 [ 1959.260980] __kernfs_create_file+0x55/0x350 [ 1959.261535] sysfs_add_file_mode_ns+0x21c/0x440 [ 1959.262116] ? __pfx_dev_attr_store+0x10/0x10 [ 1959.262687] internal_create_group+0x322/0xb20 [ 1959.263272] ? __pfx_internal_create_group+0x10/0x10 [ 1959.263895] ? kernfs_add_one+0x17a/0x4f0 [ 1959.264428] ? kernfs_create_link+0x1bb/0x240 [ 1959.264980] internal_create_groups.part.0+0x90/0x140 [ 1959.265611] sysfs_create_groups+0x29/0x50 [ 1959.266139] device_add+0x711/0x1ec0 [ 1959.266692] ? __pfx_dev_set_name+0x10/0x10 [ 1959.267456] ? __pfx_device_add+0x10/0x10 [ 1959.268166] ? __init_waitqueue_head+0xca/0x150 [ 1959.268976] netdev_register_kobject+0x17e/0x3b0 [ 1959.269776] register_netdevice+0xd60/0x1530 [ 1959.270344] ? __pfx_register_netdevice+0x10/0x10 [ 1959.270930] ? dev_addr_mod+0x29e/0x350 [ 1959.271451] __tun_chr_ioctl+0x210b/0x3f80 [ 1959.271976] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1959.272625] ? __pfx___fget_files+0x10/0x10 [ 1959.273162] ? lock_acquire+0x32/0xc0 [ 1959.273693] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1959.274288] __x64_sys_ioctl+0x19e/0x210 [ 1959.274794] do_syscall_64+0x3f/0x90 [ 1959.275289] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1959.275918] RIP: 0033:0x7fcb82d36b19 [ 1959.276367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1959.278407] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1959.279288] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1959.280109] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1959.280933] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1959.281748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1959.282575] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1959.283444] 04:56:44 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 66) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:44 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x10\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:56:44 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) (fail_nth: 6) 04:56:44 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 54) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:44 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=ANY=[@ANYBLOB="d000000008021100000008021100000150d6c96b3e50000100000001000010"], 0x21) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@ctrl_frame=@cf_end={{}, {0x7e2e}, @device_a, @from_mac}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cts={{}, {0x70}, @device_b}, 0xa) 04:56:44 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 70) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:44 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 64) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:44 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r3, r2, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r4 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, 0x0) [ 1971.788536] Invalid ELF header magic: != ELF [ 1971.793256] FAULT_INJECTION: forcing a failure. [ 1971.793256] name failslab, interval 1, probability 0, space 0, times 0 [ 1971.794434] CPU: 1 PID: 10374 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1971.795130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1971.795860] Call Trace: [ 1971.796095] [ 1971.796304] dump_stack_lvl+0x8f/0xb7 [ 1971.796664] should_fail_ex.cold+0x5/0xa [ 1971.797025] ? __kernfs_new_node+0xd4/0x8c0 [ 1971.797419] should_failslab+0x9/0x20 [ 1971.797760] kmem_cache_alloc+0x5a/0x410 [ 1971.798130] __kernfs_new_node+0xd4/0x8c0 [ 1971.798510] ? lock_release+0x3b6/0x750 [ 1971.798877] ? __pfx___kernfs_new_node+0x10/0x10 [ 1971.799297] ? __pfx_lock_release+0x10/0x10 [ 1971.799683] ? lock_acquire+0x32/0xc0 [ 1971.800049] ? up_write+0x1b0/0x520 [ 1971.800385] kernfs_new_node+0x97/0x120 [ 1971.800753] __kernfs_create_file+0x55/0x350 [ 1971.801155] sysfs_add_file_mode_ns+0x21c/0x440 [ 1971.801559] ? __pfx_dev_attr_store+0x10/0x10 [ 1971.801967] internal_create_group+0x322/0xb20 [ 1971.802390] ? __pfx_internal_create_group+0x10/0x10 [ 1971.802840] ? kernfs_add_one+0x17a/0x4f0 [ 1971.803230] ? kernfs_create_link+0x1bb/0x240 [ 1971.803653] internal_create_groups.part.0+0x90/0x140 [ 1971.804106] sysfs_create_groups+0x29/0x50 [ 1971.804493] device_add+0x711/0x1ec0 [ 1971.804826] ? __pfx_dev_set_name+0x10/0x10 [ 1971.805210] ? __pfx_device_add+0x10/0x10 [ 1971.805588] ? __init_waitqueue_head+0xca/0x150 [ 1971.806025] netdev_register_kobject+0x17e/0x3b0 [ 1971.806466] register_netdevice+0xd60/0x1530 [ 1971.806879] ? __pfx_register_netdevice+0x10/0x10 [ 1971.807311] ? dev_addr_mod+0x29e/0x350 [ 1971.807666] __tun_chr_ioctl+0x210b/0x3f80 [ 1971.808055] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1971.808476] ? __pfx___fget_files+0x10/0x10 [ 1971.808850] ? lock_acquire+0x32/0xc0 [ 1971.809208] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1971.809609] __x64_sys_ioctl+0x19e/0x210 [ 1971.809976] do_syscall_64+0x3f/0x90 [ 1971.810320] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1971.810785] RIP: 0033:0x7fcb82d36b19 [ 1971.811119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1971.812644] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1971.813280] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 1971.813888] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1971.814478] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1971.815094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1971.815716] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 1971.816346] [ 1971.834449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:56:45 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 65) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:45 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 67) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:56:45 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16:\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 1971.928950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1972.000273] Invalid ELF header magic: != ELF [ 1972.004121] FAULT_INJECTION: forcing a failure. [ 1972.004121] name failslab, interval 1, probability 0, space 0, times 0 [ 1972.005043] CPU: 1 PID: 10394 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1972.005632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1972.006182] Call Trace: [ 1972.006374] [ 1972.006540] dump_stack_lvl+0x8f/0xb7 [ 1972.006828] should_fail_ex.cold+0x5/0xa [ 1972.007119] ? __kernfs_new_node+0xd4/0x8c0 [ 1972.007437] should_failslab+0x9/0x20 [ 1972.007716] kmem_cache_alloc+0x5a/0x410 [ 1972.008014] __kernfs_new_node+0xd4/0x8c0 [ 1972.008315] ? lock_release+0x3b6/0x750 [ 1972.008602] ? __pfx___kernfs_new_node+0x10/0x10 [ 1972.008936] ? __pfx_lock_release+0x10/0x10 [ 1972.009238] ? lock_acquire+0x32/0xc0 [ 1972.009535] ? up_write+0x1b0/0x520 [ 1972.009807] kernfs_new_node+0x97/0x120 [ 1972.010110] __kernfs_create_file+0x55/0x350 [ 1972.010421] sysfs_add_file_mode_ns+0x21c/0x440 [ 1972.010754] ? __pfx_dev_attr_store+0x10/0x10 [ 1972.011085] internal_create_group+0x322/0xb20 [ 1972.011426] ? __pfx_internal_create_group+0x10/0x10 [ 1972.011788] ? kernfs_add_one+0x17a/0x4f0 [ 1972.012088] ? kernfs_create_link+0x1bb/0x240 [ 1972.012413] internal_create_groups.part.0+0x90/0x140 [ 1972.012783] sysfs_create_groups+0x29/0x50 [ 1972.013087] device_add+0x711/0x1ec0 [ 1972.013360] ? __pfx_dev_set_name+0x10/0x10 [ 1972.013673] ? __pfx_device_add+0x10/0x10 [ 1972.013990] ? __init_waitqueue_head+0xca/0x150 [ 1972.014330] netdev_register_kobject+0x17e/0x3b0 [ 1972.014703] register_netdevice+0xd60/0x1530 [ 1972.015030] ? __pfx_register_netdevice+0x10/0x10 [ 1972.015405] ? dev_addr_mod+0x29e/0x350 [ 1972.015692] __tun_chr_ioctl+0x210b/0x3f80 [ 1972.016014] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1972.016337] ? __pfx___fget_files+0x10/0x10 [ 1972.016662] ? lock_acquire+0x32/0xc0 [ 1972.016971] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1972.017303] __x64_sys_ioctl+0x19e/0x210 [ 1972.017597] do_syscall_64+0x3f/0x90 [ 1972.017888] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1972.018253] RIP: 0033:0x7ff461a5bb19 [ 1972.018531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1972.019729] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1972.020284] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 1972.020796] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1972.021315] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1972.021824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1972.022343] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 1972.022872] [ 1974.640098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1974.641562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1974.644036] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1974.646300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1974.647599] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1974.648956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1976.669784] Bluetooth: hci3: command 0x0409 tx timeout [ 1978.717766] Bluetooth: hci3: command 0x041b tx timeout [ 1980.765883] Bluetooth: hci3: command 0x040f tx timeout [ 1982.814487] Bluetooth: hci3: command 0x0419 tx timeout [ 1995.291359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1995.292454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1995.295129] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1995.347505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1995.348568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1995.351292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1995.741770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1995.746841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1995.751145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1996.057795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1996.061890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1996.065092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:57:21 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) (fail_nth: 7) 04:57:21 executing program 3: dup(0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000000000)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b, @from_mac}, @measure_req={0x0, 0x0, {0x4, [{0x26, 0x1003, {0x0, 0x80, 0x3f, "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"}}, {0x26, 0xe2, {0x9, 0x1f, 0x8a, "c70057956d53218cb85ca5a131f599e304e1e57c0a7a182efd7b6a60b3eb5f602ddafdba754a0f2e65b5f7c52413ffa4242456acfd2faf877305df88ee5c2d3832d6e4fe7b4a2bac15551985034e1b60e26e1ad33d8d562958ce85ea9723e51ac5d5a7b29ec0db677d98ea07c8164ffbce1d4d6bd98bec3ce0b296e88ceea8dcbc582bcc8b33af60b902a0677d6c2cce959357a2ac9d622b952c4f18cff037535d6ca94239c56124a30addac5ce0b3bba22e216d544725a36b9eca785320ff8abe183b28ce0adf2048c8a16ab866f33455b45930a1c1549b1e81321b669d97"}}, {0x26, 0x7c, {0x0, 0x81, 0x0, "1231eef900cc98596b3bd5214dac320a9ceffcb29625f33d1e52e49043c67423ff9fef661562538d1cd4548520b08fe2559888af99a625fbe99e2119e489eee975d87c61a30fc79c694097a67fe04d76c909ab49ae5eac2b1a06e3b3bc7fc47ee7f051164cff451c46c3ea1065d62f217329c098dc26408c33"}}, {0x26, 0x7d, {0x7d, 0x1, 0x3, "b0c90aad4d3d03cfc3d844282aff37cb44861ebedd7a994c903d516ef8108b7d256f56ecfa899c22fcdd07ced06a548996c6af804aa3cea718924f8c43ffa99856f72f630161f106738143eafd95e74fa934f1815067529598d09b81507ee18b0c91ca2f2ef29c3bc41ae3ed00c99a0259457ea71e832c47388b"}}, {0x26, 0xa, {0x7f, 0x1, 0x5, "934a732fc9cbb8"}}]}}}, 0x120d) 04:57:21 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 66) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:57:21 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 68) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:57:21 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r3, r2, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r4 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, 0x0) 04:57:21 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 71) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:57:21 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 55) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:57:21 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D:\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 2007.927439] FAULT_INJECTION: forcing a failure. [ 2007.927439] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.928519] CPU: 1 PID: 10867 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2007.929090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.929637] Call Trace: [ 2007.929821] [ 2007.929987] dump_stack_lvl+0x8f/0xb7 [ 2007.930274] should_fail_ex.cold+0x5/0xa [ 2007.930567] ? __kernfs_new_node+0xd4/0x8c0 [ 2007.930872] should_failslab+0x9/0x20 [ 2007.931153] kmem_cache_alloc+0x5a/0x410 [ 2007.931445] __kernfs_new_node+0xd4/0x8c0 [ 2007.931750] ? lock_release+0x3b6/0x750 [ 2007.932036] ? __pfx___kernfs_new_node+0x10/0x10 [ 2007.932366] ? __pfx_lock_release+0x10/0x10 [ 2007.932663] ? lock_acquire+0x32/0xc0 [ 2007.932949] ? up_write+0x1b0/0x520 [ 2007.933223] kernfs_new_node+0x97/0x120 [ 2007.933515] __kernfs_create_file+0x55/0x350 [ 2007.933826] sysfs_add_file_mode_ns+0x21c/0x440 [ 2007.934157] ? __pfx_dev_attr_store+0x10/0x10 [ 2007.934478] internal_create_group+0x322/0xb20 [ 2007.934810] ? __pfx_internal_create_group+0x10/0x10 [ 2007.935160] ? kernfs_add_one+0x17a/0x4f0 [ 2007.935470] ? kernfs_create_link+0x1bb/0x240 [ 2007.935798] internal_create_groups.part.0+0x90/0x140 [ 2007.936164] sysfs_create_groups+0x29/0x50 [ 2007.936464] device_add+0x711/0x1ec0 [ 2007.936735] ? __pfx_dev_set_name+0x10/0x10 [ 2007.937046] ? __pfx_device_add+0x10/0x10 [ 2007.937351] ? __init_waitqueue_head+0xca/0x150 [ 2007.937701] netdev_register_kobject+0x17e/0x3b0 [ 2007.938060] register_netdevice+0xd60/0x1530 [ 2007.938401] ? __pfx_register_netdevice+0x10/0x10 [ 2007.938766] ? dev_addr_mod+0x29e/0x350 [ 2007.939061] __tun_chr_ioctl+0x210b/0x3f80 [ 2007.939382] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2007.939721] ? __pfx___fget_files+0x10/0x10 [ 2007.940056] ? lock_acquire+0x32/0xc0 [ 2007.940357] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2007.940681] __x64_sys_ioctl+0x19e/0x210 [ 2007.940984] do_syscall_64+0x3f/0x90 [ 2007.941269] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2007.941647] RIP: 0033:0x7fcb82d36b19 [ 2007.941917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.943182] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2007.943725] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 2007.944247] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2007.944757] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2007.945254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2007.945754] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 2007.946276] 04:57:21 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) (fail_nth: 8) 04:57:21 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 67) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 2008.037072] Invalid ELF header magic: != ELF [ 2008.040635] FAULT_INJECTION: forcing a failure. [ 2008.040635] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.042158] CPU: 1 PID: 10871 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2008.042713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2008.043255] Call Trace: [ 2008.043439] [ 2008.043603] dump_stack_lvl+0x8f/0xb7 [ 2008.043898] should_fail_ex.cold+0x5/0xa [ 2008.044188] ? __kernfs_new_node+0xd4/0x8c0 [ 2008.044502] should_failslab+0x9/0x20 [ 2008.044778] kmem_cache_alloc+0x5a/0x410 [ 2008.045080] __kernfs_new_node+0xd4/0x8c0 [ 2008.045384] ? lock_release+0x3b6/0x750 [ 2008.045669] ? __pfx___kernfs_new_node+0x10/0x10 [ 2008.046019] ? __pfx_lock_release+0x10/0x10 [ 2008.046337] ? lock_acquire+0x32/0xc0 [ 2008.046632] ? up_write+0x1b0/0x520 [ 2008.046912] kernfs_new_node+0x97/0x120 [ 2008.047219] __kernfs_create_file+0x55/0x350 [ 2008.047543] sysfs_add_file_mode_ns+0x21c/0x440 [ 2008.047892] ? __pfx_dev_attr_store+0x10/0x10 [ 2008.048215] internal_create_group+0x322/0xb20 [ 2008.048549] ? __pfx_internal_create_group+0x10/0x10 [ 2008.048903] ? kernfs_add_one+0x17a/0x4f0 [ 2008.049206] ? kernfs_create_link+0x1bb/0x240 [ 2008.049523] internal_create_groups.part.0+0x90/0x140 [ 2008.049891] sysfs_create_groups+0x29/0x50 [ 2008.050193] device_add+0x711/0x1ec0 [ 2008.050468] ? __pfx_dev_set_name+0x10/0x10 [ 2008.050774] ? __pfx_device_add+0x10/0x10 [ 2008.051079] ? __init_waitqueue_head+0xca/0x150 [ 2008.051425] netdev_register_kobject+0x17e/0x3b0 [ 2008.051786] register_netdevice+0xd60/0x1530 [ 2008.052123] ? __pfx_register_netdevice+0x10/0x10 [ 2008.052465] ? dev_addr_mod+0x29e/0x350 [ 2008.052753] __tun_chr_ioctl+0x210b/0x3f80 [ 2008.053058] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2008.053388] ? __pfx___fget_files+0x10/0x10 [ 2008.053699] ? lock_acquire+0x32/0xc0 [ 2008.054002] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2008.054328] __x64_sys_ioctl+0x19e/0x210 [ 2008.054623] do_syscall_64+0x3f/0x90 [ 2008.054902] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2008.055282] RIP: 0033:0x7f2e2b599b19 [ 2008.055546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2008.056740] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2008.057252] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 2008.057736] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2008.058228] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2008.058715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2008.059207] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 2008.059703] [ 2008.118641] Invalid ELF header magic: != ELF [ 2008.163296] FAULT_INJECTION: forcing a failure. [ 2008.163296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2008.164195] CPU: 1 PID: 10884 Comm: syz-executor.7 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2008.164745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2008.165287] Call Trace: [ 2008.165472] [ 2008.165634] dump_stack_lvl+0x8f/0xb7 [ 2008.165927] should_fail_ex.cold+0x5/0xa [ 2008.166220] _copy_to_user+0x2e/0x150 [ 2008.166497] simple_read_from_buffer+0xd0/0x170 [ 2008.166831] proc_fail_nth_read+0x19c/0x230 [ 2008.167144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2008.167479] ? security_file_permission+0xb5/0xe0 [ 2008.167842] vfs_read+0x257/0x940 [ 2008.168104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2008.168442] ? __pfx_vfs_read+0x10/0x10 [ 2008.168744] ? __fget_files+0x270/0x450 [ 2008.169037] ksys_read+0x12b/0x260 [ 2008.169301] ? __pfx_ksys_read+0x10/0x10 [ 2008.169596] ? syscall_enter_from_user_mode+0x21/0x50 [ 2008.169959] ? syscall_enter_from_user_mode+0x21/0x50 [ 2008.170321] do_syscall_64+0x3f/0x90 [ 2008.170601] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2008.170961] RIP: 0033:0x7f0dca2d969c [ 2008.171218] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2008.172404] RSP: 002b:00007f0dc789c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2008.172945] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f0dca2d969c [ 2008.173445] RDX: 000000000000000f RSI: 00007f0dc789c1e0 RDI: 0000000000000005 [ 2008.173915] RBP: 00007f0dc789c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2008.174423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2008.174920] R13: 00007fff04f265cf R14: 00007f0dc789c300 R15: 0000000000022000 [ 2008.175451] [ 2008.177295] FAULT_INJECTION: forcing a failure. [ 2008.177295] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.178229] CPU: 1 PID: 10886 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2008.178822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2008.179402] Call Trace: [ 2008.179593] [ 2008.179778] dump_stack_lvl+0x8f/0xb7 [ 2008.180070] should_fail_ex.cold+0x5/0xa [ 2008.180377] ? __kernfs_new_node+0xd4/0x8c0 [ 2008.180707] should_failslab+0x9/0x20 [ 2008.180997] kmem_cache_alloc+0x5a/0x410 [ 2008.181313] __kernfs_new_node+0xd4/0x8c0 [ 2008.181625] ? lock_release+0x3b6/0x750 [ 2008.181938] ? __pfx___kernfs_new_node+0x10/0x10 [ 2008.182295] ? __pfx_lock_release+0x10/0x10 [ 2008.182621] ? lock_acquire+0x32/0xc0 [ 2008.182923] ? up_write+0x1b0/0x520 [ 2008.183191] kernfs_new_node+0x97/0x120 [ 2008.183501] __kernfs_create_file+0x55/0x350 [ 2008.183842] sysfs_add_file_mode_ns+0x21c/0x440 [ 2008.184212] ? __pfx_dev_attr_store+0x10/0x10 [ 2008.184538] internal_create_group+0x322/0xb20 [ 2008.184892] ? __pfx_internal_create_group+0x10/0x10 [ 2008.185265] ? kernfs_add_one+0x17a/0x4f0 [ 2008.185588] ? kernfs_create_link+0x1bb/0x240 [ 2008.185919] internal_create_groups.part.0+0x90/0x140 [ 2008.186306] sysfs_create_groups+0x29/0x50 [ 2008.186605] device_add+0x711/0x1ec0 [ 2008.186896] ? __pfx_dev_set_name+0x10/0x10 [ 2008.187217] ? __pfx_device_add+0x10/0x10 [ 2008.187534] ? __init_waitqueue_head+0xca/0x150 [ 2008.187880] netdev_register_kobject+0x17e/0x3b0 [ 2008.188247] register_netdevice+0xd60/0x1530 [ 2008.188581] ? __pfx_register_netdevice+0x10/0x10 [ 2008.188946] ? dev_addr_mod+0x29e/0x350 [ 2008.189244] __tun_chr_ioctl+0x210b/0x3f80 [ 2008.189569] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2008.189908] ? selinux_file_ioctl+0x5c/0x260 [ 2008.190239] ? __sanitizer_cov_trace_switch+0x40/0x90 [ 2008.190631] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2008.190960] __x64_sys_ioctl+0x19e/0x210 [ 2008.191267] do_syscall_64+0x3f/0x90 [ 2008.191563] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2008.191956] RIP: 0033:0x7fcb82d36b19 [ 2008.192231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2008.193489] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2008.194034] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 2008.194537] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2008.195047] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2008.195547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2008.196071] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 2008.196594] 04:57:21 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8:\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:57:21 executing program 3: close(0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1}}}}, 0x21) 04:57:21 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 69) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 2008.286142] Invalid ELF header magic: != ELF [ 2008.356386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:57:33 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 04:57:33 executing program 3: r0 = dup(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xcc, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3b504a30f203dd2784aa6747952d311fcf8f71f75c218c3f"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f1a00a5b8e67fcdd39a3d236de9dcaf3f41bc12a9d3ea502"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4017f9e52e940fdeb6beccf5cb3f8aa928dfdf1f0e9cd0c2"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1}}}}, 0x21) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x7ff7}, @initial, @broadcast, @device_b, {0xc, 0x80}}, @random="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"}, 0x4e7) 04:57:33 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x3b000, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:57:33 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 70) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:57:33 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 68) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:57:33 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r3, r2, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r4 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe13}}, './file0\x00'}) 04:57:33 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 56) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:57:33 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 72) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 2020.375731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2020.380420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2020.407147] FAULT_INJECTION: forcing a failure. [ 2020.407147] name failslab, interval 1, probability 0, space 0, times 0 [ 2020.408089] CPU: 1 PID: 10907 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2020.408652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2020.409201] Call Trace: [ 2020.409383] [ 2020.409545] dump_stack_lvl+0x8f/0xb7 [ 2020.409831] should_fail_ex.cold+0x5/0xa [ 2020.410121] ? __kernfs_new_node+0xd4/0x8c0 [ 2020.410426] should_failslab+0x9/0x20 [ 2020.410702] kmem_cache_alloc+0x5a/0x410 [ 2020.410995] __kernfs_new_node+0xd4/0x8c0 [ 2020.411294] ? lock_release+0x3b6/0x750 [ 2020.411593] ? __pfx___kernfs_new_node+0x10/0x10 [ 2020.411963] ? __pfx_lock_release+0x10/0x10 [ 2020.412275] ? lock_acquire+0x32/0xc0 [ 2020.412569] ? up_write+0x1b0/0x520 [ 2020.412856] kernfs_new_node+0x97/0x120 [ 2020.413160] __kernfs_create_file+0x55/0x350 [ 2020.413478] sysfs_add_file_mode_ns+0x21c/0x440 [ 2020.413808] ? __pfx_dev_attr_store+0x10/0x10 [ 2020.414130] internal_create_group+0x322/0xb20 [ 2020.414458] ? __pfx_internal_create_group+0x10/0x10 [ 2020.414828] ? kernfs_add_one+0x17a/0x4f0 [ 2020.415140] ? kernfs_create_link+0x1bb/0x240 [ 2020.415467] internal_create_groups.part.0+0x90/0x140 [ 2020.415835] sysfs_create_groups+0x29/0x50 [ 2020.416155] device_add+0x711/0x1ec0 [ 2020.416428] ? __pfx_dev_set_name+0x10/0x10 [ 2020.416742] ? __pfx_device_add+0x10/0x10 [ 2020.417034] ? __init_waitqueue_head+0xca/0x150 [ 2020.417377] netdev_register_kobject+0x17e/0x3b0 [ 2020.417726] register_netdevice+0xd60/0x1530 [ 2020.418071] ? __pfx_register_netdevice+0x10/0x10 [ 2020.418423] ? dev_addr_mod+0x29e/0x350 [ 2020.418724] __tun_chr_ioctl+0x210b/0x3f80 [ 2020.419029] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2020.419356] ? __pfx___fget_files+0x10/0x10 [ 2020.419660] ? lock_acquire+0x32/0xc0 [ 2020.419982] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2020.420314] __x64_sys_ioctl+0x19e/0x210 [ 2020.420607] do_syscall_64+0x3f/0x90 [ 2020.420889] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2020.421267] RIP: 0033:0x7ff461a5bb19 [ 2020.421526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2020.422807] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2020.423321] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 2020.423842] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2020.424361] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2020.424871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2020.425381] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 2020.425907] [ 2020.477612] FAULT_INJECTION: forcing a failure. [ 2020.477612] name failslab, interval 1, probability 0, space 0, times 0 [ 2020.480173] CPU: 0 PID: 10905 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2020.481254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2020.482305] Call Trace: [ 2020.482650] [ 2020.482962] dump_stack_lvl+0x8f/0xb7 [ 2020.483492] should_fail_ex.cold+0x5/0xa [ 2020.484050] ? __kernfs_new_node+0xd4/0x8c0 [ 2020.484628] should_failslab+0x9/0x20 [ 2020.485138] kmem_cache_alloc+0x5a/0x410 [ 2020.485701] __kernfs_new_node+0xd4/0x8c0 [ 2020.486267] ? lock_release+0x3b6/0x750 [ 2020.486804] ? __pfx___kernfs_new_node+0x10/0x10 [ 2020.487450] ? __pfx_lock_release+0x10/0x10 [ 2020.488032] ? lock_acquire+0x32/0xc0 [ 2020.488571] ? up_write+0x1b0/0x520 [ 2020.489089] kernfs_new_node+0x97/0x120 [ 2020.489646] __kernfs_create_file+0x55/0x350 [ 2020.490250] sysfs_add_file_mode_ns+0x21c/0x440 [ 2020.490860] ? __pfx_dev_attr_store+0x10/0x10 [ 2020.491452] internal_create_group+0x322/0xb20 [ 2020.492080] ? __pfx_internal_create_group+0x10/0x10 [ 2020.492717] ? kernfs_add_one+0x17a/0x4f0 [ 2020.493268] ? kernfs_create_link+0x1bb/0x240 [ 2020.493842] internal_create_groups.part.0+0x90/0x140 [ 2020.494502] sysfs_create_groups+0x29/0x50 [ 2020.495052] device_add+0x711/0x1ec0 [ 2020.495540] ? __pfx_dev_set_name+0x10/0x10 [ 2020.496113] ? __pfx_device_add+0x10/0x10 [ 2020.496657] ? __init_waitqueue_head+0xca/0x150 [ 2020.497267] netdev_register_kobject+0x17e/0x3b0 [ 2020.497881] register_netdevice+0xd60/0x1530 [ 2020.498463] ? __pfx_register_netdevice+0x10/0x10 [ 2020.499084] ? dev_addr_mod+0x29e/0x350 [ 2020.499594] __tun_chr_ioctl+0x210b/0x3f80 [ 2020.500162] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2020.500744] ? __pfx___fget_files+0x10/0x10 [ 2020.501297] ? lock_acquire+0x32/0xc0 [ 2020.501816] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2020.502379] __x64_sys_ioctl+0x19e/0x210 [ 2020.502908] do_syscall_64+0x3f/0x90 [ 2020.503401] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2020.504061] RIP: 0033:0x7f2e2b599b19 [ 2020.504524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2020.506665] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2020.507596] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 2020.508462] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2020.509320] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2020.510186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2020.511046] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 2020.511965] [ 2020.527564] Invalid ELF header magic: != ELF [ 2020.539602] FAULT_INJECTION: forcing a failure. [ 2020.539602] name failslab, interval 1, probability 0, space 0, times 0 [ 2020.541482] CPU: 0 PID: 10910 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2020.542489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2020.543475] Call Trace: [ 2020.543801] [ 2020.544129] dump_stack_lvl+0x8f/0xb7 [ 2020.544632] should_fail_ex.cold+0x5/0xa [ 2020.545159] ? __kernfs_new_node+0xd4/0x8c0 [ 2020.545709] should_failslab+0x9/0x20 [ 2020.546206] kmem_cache_alloc+0x5a/0x410 [ 2020.546737] __kernfs_new_node+0xd4/0x8c0 [ 2020.547274] ? lock_release+0x3b6/0x750 [ 2020.547790] ? __pfx___kernfs_new_node+0x10/0x10 [ 2020.548409] ? __pfx_lock_release+0x10/0x10 [ 2020.548955] ? lock_acquire+0x32/0xc0 [ 2020.549473] ? up_write+0x1b0/0x520 [ 2020.549960] kernfs_new_node+0x97/0x120 [ 2020.550496] __kernfs_create_file+0x55/0x350 [ 2020.551066] sysfs_add_file_mode_ns+0x21c/0x440 [ 2020.551670] ? __pfx_dev_attr_store+0x10/0x10 [ 2020.552273] internal_create_group+0x322/0xb20 [ 2020.552879] ? __pfx_internal_create_group+0x10/0x10 [ 2020.553523] ? kernfs_add_one+0x17a/0x4f0 [ 2020.554074] ? kernfs_create_link+0x1bb/0x240 [ 2020.554659] internal_create_groups.part.0+0x90/0x140 [ 2020.555323] sysfs_create_groups+0x29/0x50 [ 2020.555871] device_add+0x711/0x1ec0 [ 2020.556377] ? __pfx_dev_set_name+0x10/0x10 [ 2020.556945] ? __pfx_device_add+0x10/0x10 [ 2020.557489] ? __init_waitqueue_head+0xca/0x150 [ 2020.558101] netdev_register_kobject+0x17e/0x3b0 [ 2020.558725] register_netdevice+0xd60/0x1530 [ 2020.559319] ? __pfx_register_netdevice+0x10/0x10 [ 2020.559957] ? dev_addr_mod+0x29e/0x350 [ 2020.560469] __tun_chr_ioctl+0x210b/0x3f80 [ 2020.561021] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2020.561600] ? __pfx___fget_files+0x10/0x10 [ 2020.562149] ? lock_acquire+0x32/0xc0 [ 2020.562671] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2020.563252] __x64_sys_ioctl+0x19e/0x210 [ 2020.563783] do_syscall_64+0x3f/0x90 [ 2020.564305] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2020.564960] RIP: 0033:0x7fcb82d36b19 [ 2020.565428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2020.567586] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2020.568523] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 2020.569396] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2020.570262] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2020.571130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2020.572002] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 2020.572898] 04:57:33 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 73) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:57:33 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 71) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:57:33 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x2, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 04:57:33 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 57) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:57:33 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r3, r2, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r4 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe13}}, './file0\x00'}) 04:57:33 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)=':,(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 2020.684118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:57:33 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 69) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:57:33 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000000000)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {0x1e6c}, @device_a, @device_b, @initial, {0x4, 0xfc0}}, @ver_80211n={0x0, 0x7f01, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @addba_resp={0x3, 0x1, {0x0, 0x20, {0x1}}}}, 0x25) 04:57:34 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x4b47, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) [ 2020.795390] Invalid ELF header magic: != ELF [ 2020.819319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2020.867514] FAULT_INJECTION: forcing a failure. [ 2020.867514] name failslab, interval 1, probability 0, space 0, times 0 [ 2020.869469] CPU: 0 PID: 10937 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2020.870490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2020.871478] Call Trace: [ 2020.871808] [ 2020.872122] dump_stack_lvl+0x8f/0xb7 [ 2020.872643] should_fail_ex.cold+0x5/0xa [ 2020.873171] ? __kernfs_new_node+0xd4/0x8c0 [ 2020.873729] should_failslab+0x9/0x20 [ 2020.874219] kmem_cache_alloc+0x5a/0x410 [ 2020.874750] __kernfs_new_node+0xd4/0x8c0 [ 2020.875283] ? lock_release+0x3b6/0x750 [ 2020.875810] ? __pfx___kernfs_new_node+0x10/0x10 [ 2020.876441] ? __pfx_lock_release+0x10/0x10 [ 2020.876994] ? lock_acquire+0x32/0xc0 [ 2020.877509] ? up_write+0x1b0/0x520 [ 2020.878010] kernfs_new_node+0x97/0x120 [ 2020.878535] __kernfs_create_file+0x55/0x350 [ 2020.879104] sysfs_add_file_mode_ns+0x21c/0x440 [ 2020.879702] ? __pfx_dev_attr_store+0x10/0x10 [ 2020.880298] internal_create_group+0x322/0xb20 [ 2020.880894] ? __pfx_internal_create_group+0x10/0x10 [ 2020.881539] ? kernfs_add_one+0x17a/0x4f0 [ 2020.882094] ? kernfs_create_link+0x1bb/0x240 [ 2020.882678] internal_create_groups.part.0+0x90/0x140 [ 2020.883343] sysfs_create_groups+0x29/0x50 [ 2020.883890] device_add+0x711/0x1ec0 [ 2020.884400] ? __pfx_dev_set_name+0x10/0x10 [ 2020.884963] ? __pfx_device_add+0x10/0x10 [ 2020.885500] ? __init_waitqueue_head+0xca/0x150 [ 2020.886131] netdev_register_kobject+0x17e/0x3b0 [ 2020.886764] register_netdevice+0xd60/0x1530 [ 2020.887360] ? __pfx_register_netdevice+0x10/0x10 [ 2020.888004] ? dev_addr_mod+0x29e/0x350 [ 2020.888531] __tun_chr_ioctl+0x210b/0x3f80 [ 2020.889096] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2020.889699] ? __pfx___fget_files+0x10/0x10 [ 2020.890255] ? lock_acquire+0x32/0xc0 [ 2020.890777] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2020.891344] __x64_sys_ioctl+0x19e/0x210 [ 2020.891876] do_syscall_64+0x3f/0x90 [ 2020.892376] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2020.893037] RIP: 0033:0x7fcb82d36b19 [ 2020.893500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2020.895657] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2020.896603] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 2020.897479] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2020.898337] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2020.899210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2020.900087] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 2020.901005] [ 2020.904469] Invalid ELF header magic: != ELF 04:57:34 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x4b49, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) [ 2021.124584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:57:48 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 58) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:57:48 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 70) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:57:48 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000000100)=ANY=[@ANYBLOB="d00000000802110000000802110000ce0428da045050505050381fb4f615725ad001000000"], 0x21) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f00000003c0)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xa}, {0xff}, @device_a, @device_b, @device_a, {0x3, 0x2}, @device_b}, {0x9, 0x1, 0x2, 0x0, 0x40}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7e4f}, @device_a, @device_b, @random="387ade758beb", {0x4, 0xff8}}, {0x0, 0x1, 0x3, 0x1, 0x3}}}, @ver_80211n={0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_a, @device_a, 0x34, "27cfee1bab195327c10a03b9990691324ed4331fa1a4cbaac8b6835fbd4a1c55288d9a8d6076cef1733cc867bd57de655deb99db"}, {@device_b, @broadcast}, {@device_b, @device_a, 0xee, "cbb0bf3948ed54c6325fc37e3b96a1cd642ac22ae91863573afed679eab1f688dbf44a3eccbb347f8b6b182a1567f6c8567bd59af672126e464146399ea5762a9d972ccda5ee1c97779c3565c322681d24ca9a34ce2b5375f0b8c1f5f52182207fc19146c5b8fcd5ce3399710736c45dcdb3b410bbf668e32ff2353e997b073d0c04b40507f14a64c2c3ca497f8aa2ff7408e2025108c3131cee4cbc583585020166ac27b4541353351f1c75f480fa1379f2214e3f4184d779ec01a0828a79a6822f1966e1d3f569e20b9d160c72f0a29aef74a33ee339acf7037542f4e655315c9b0c9a4e0455e886e3b9b3f662"}]}, 0x18e) syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000180)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @broadcast, @initial, {0x2, 0x3f}}, {0x9, 0x0, 0x2, 0x0, 0xfc}}, {@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @initial, @random="7aaf69e352f9", {0x0, 0x20}}, {0x2, 0x0, 0x3, 0x1, 0x40}}}, @ver_80211n={0x0, 0xfb4, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x57, "ec9e756dc9aabaace9182356fc95e74ffe013265b0aab340e6e070a36bee912734e8b9e03efaee4d402d6b72abdaf607296d10dc75f9e2b490b45583ae5f9a593c32c37be6ec7644cdd24130479d5b05df688b2fc5399d"}, {@device_b, @broadcast, 0xa8, "2abf127920b86118882347b6134113ba70500b6e55aaed1b4c384a8ca6c65c117636e8eaa6d21021367237ae90730f7816517745cd8d13d5d8d7e0ace1b4322d44c09016fa952f2eece1ed59126b3b390bd995ea540183b8674f47f27ed47e61144bd041929e72e2af345759e50443b0a84c8cf41178480d6d05e8815bb78662d0195a156f16144b904be9221b32db5277c2957b67002f21c8e43eee082eacc3650d38eb502e0109"}, {@device_a, @device_b, 0x4b, "2af612f991b8b5eba99f16102f63a8ae126746bd562c54eb8dae328ae05c735b21ee16cc7eee4736fb49f03a7f7f208a36c2492e3a564ef0fbfed791b30af80100279bb6910e714d236d11"}, {@device_b, @broadcast}]}, 0x1c4) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xe}, {0x80}, @broadcast, @device_b, @device_a, {0x6, 0x40}, @broadcast}, {0x1, 0x0, 0x3, 0x0, 0x4}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0x8}}, {0x9, 0x1, 0x2, 0x1, 0x7f}}}, @a_msdu=[{@broadcast, @device_b, 0x75, "c8981c095155656a4effb431437bd7325296149e52b2779ac199fef3667d2e990030be033daf31587aabc9a7e008365cdb8258a5d31507809e41259be8821bc3c8aa74faf3d56a81d694ff1f4b97e7600d5f11b2c931de405b1e2a39c82220f597289debb50fadfc7cbc5ebd0acbf771f17036efe4"}]}, 0xbe) 04:57:48 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='):(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:57:48 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 72) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:57:48 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r3, r2, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r4 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe13}}, './file0\x00'}) 04:57:48 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 74) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:57:48 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x541b, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) [ 2035.542362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2035.545478] FAULT_INJECTION: forcing a failure. [ 2035.545478] name failslab, interval 1, probability 0, space 0, times 0 [ 2035.546502] CPU: 0 PID: 10963 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2035.547005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2035.547562] Call Trace: [ 2035.547729] [ 2035.547895] dump_stack_lvl+0x8f/0xb7 [ 2035.548179] should_fail_ex.cold+0x5/0xa [ 2035.548479] ? __kernfs_new_node+0xd4/0x8c0 [ 2035.548764] should_failslab+0x9/0x20 [ 2035.549040] kmem_cache_alloc+0x5a/0x410 [ 2035.549316] __kernfs_new_node+0xd4/0x8c0 [ 2035.549616] ? lock_release+0x3b6/0x750 [ 2035.549878] ? __pfx___kernfs_new_node+0x10/0x10 [ 2035.550214] ? __pfx_lock_release+0x10/0x10 [ 2035.550492] ? lock_acquire+0x32/0xc0 [ 2035.550778] ? up_write+0x1b0/0x520 [ 2035.551031] kernfs_new_node+0x97/0x120 [ 2035.551334] __kernfs_create_file+0x55/0x350 [ 2035.551622] sysfs_add_file_mode_ns+0x21c/0x440 [ 2035.551952] ? __pfx_dev_attr_store+0x10/0x10 [ 2035.552259] internal_create_group+0x322/0xb20 [ 2035.552592] ? __pfx_internal_create_group+0x10/0x10 [ 2035.552916] ? kernfs_add_one+0x17a/0x4f0 [ 2035.553225] ? kernfs_create_link+0x1bb/0x240 [ 2035.553517] internal_create_groups.part.0+0x90/0x140 [ 2035.553886] sysfs_create_groups+0x29/0x50 [ 2035.554166] device_add+0x711/0x1ec0 [ 2035.554438] ? __pfx_dev_set_name+0x10/0x10 [ 2035.554723] ? __pfx_device_add+0x10/0x10 [ 2035.555020] ? __init_waitqueue_head+0xca/0x150 [ 2035.555329] netdev_register_kobject+0x17e/0x3b0 [ 2035.555670] register_netdevice+0xd60/0x1530 [ 2035.555965] ? __pfx_register_netdevice+0x10/0x10 [ 2035.556316] ? dev_addr_mod+0x29e/0x350 [ 2035.556576] __tun_chr_ioctl+0x210b/0x3f80 [ 2035.556882] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2035.557181] ? __pfx___fget_files+0x10/0x10 [ 2035.557483] ? lock_acquire+0x32/0xc0 [ 2035.557749] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2035.558059] __x64_sys_ioctl+0x19e/0x210 [ 2035.558328] do_syscall_64+0x3f/0x90 [ 2035.558604] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2035.558937] RIP: 0033:0x7fcb82d36b19 [ 2035.559199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2035.560411] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2035.560925] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 2035.561427] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2035.561920] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2035.562413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2035.562904] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 2035.563418] [ 2035.580917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2035.586732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:57:48 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5421, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) [ 2035.593743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2035.610965] Invalid ELF header magic: != ELF 04:57:48 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5450, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) [ 2035.718095] FAULT_INJECTION: forcing a failure. [ 2035.718095] name failslab, interval 1, probability 0, space 0, times 0 [ 2035.719303] CPU: 0 PID: 10972 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2035.719905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2035.720493] Call Trace: [ 2035.720684] [ 2035.720854] dump_stack_lvl+0x8f/0xb7 [ 2035.721154] should_fail_ex.cold+0x5/0xa [ 2035.721470] ? __kernfs_new_node+0xd4/0x8c0 [ 2035.721797] should_failslab+0x9/0x20 [ 2035.722085] kmem_cache_alloc+0x5a/0x410 [ 2035.722396] __kernfs_new_node+0xd4/0x8c0 [ 2035.722713] ? lock_release+0x3b6/0x750 [ 2035.723020] ? __pfx___kernfs_new_node+0x10/0x10 [ 2035.723375] ? __pfx_lock_release+0x10/0x10 [ 2035.723699] ? lock_acquire+0x32/0xc0 [ 2035.723968] ? up_write+0x1b0/0x520 [ 2035.724264] kernfs_new_node+0x97/0x120 [ 2035.724576] __kernfs_create_file+0x55/0x350 [ 2035.724908] sysfs_add_file_mode_ns+0x21c/0x440 [ 2035.725264] ? __pfx_dev_attr_store+0x10/0x10 [ 2035.725606] internal_create_group+0x322/0xb20 [ 2035.725957] ? __pfx_internal_create_group+0x10/0x10 [ 2035.726332] ? kernfs_add_one+0x17a/0x4f0 [ 2035.726652] ? kernfs_create_link+0x1bb/0x240 [ 2035.726992] internal_create_groups.part.0+0x90/0x140 [ 2035.727386] sysfs_create_groups+0x29/0x50 [ 2035.727709] device_add+0x711/0x1ec0 [ 2035.727996] ? __pfx_dev_set_name+0x10/0x10 [ 2035.728299] ? __pfx_device_add+0x10/0x10 [ 2035.728618] ? __init_waitqueue_head+0xca/0x150 [ 2035.728987] netdev_register_kobject+0x17e/0x3b0 [ 2035.729348] register_netdevice+0xd60/0x1530 [ 2035.729689] ? __pfx_register_netdevice+0x10/0x10 [ 2035.730054] ? dev_addr_mod+0x29e/0x350 [ 2035.730353] __tun_chr_ioctl+0x210b/0x3f80 [ 2035.730680] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2035.731017] ? __pfx___fget_files+0x10/0x10 [ 2035.731335] ? lock_acquire+0x32/0xc0 [ 2035.731605] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2035.731940] __x64_sys_ioctl+0x19e/0x210 [ 2035.732218] do_syscall_64+0x3f/0x90 [ 2035.732507] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2035.732897] RIP: 0033:0x7f59fcc15b19 [ 2035.733174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2035.734258] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2035.734797] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 2035.735301] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2035.735812] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2035.736342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2035.736853] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 2035.737381] [ 2035.778523] FAULT_INJECTION: forcing a failure. [ 2035.778523] name failslab, interval 1, probability 0, space 0, times 0 [ 2035.780427] CPU: 1 PID: 10977 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2035.781564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2035.782679] Call Trace: [ 2035.783058] [ 2035.783391] dump_stack_lvl+0x8f/0xb7 [ 2035.783962] should_fail_ex.cold+0x5/0xa [ 2035.784580] ? __kernfs_new_node+0xd4/0x8c0 [ 2035.785203] should_failslab+0x9/0x20 [ 2035.785753] kmem_cache_alloc+0x5a/0x410 [ 2035.786347] __kernfs_new_node+0xd4/0x8c0 [ 2035.786964] ? lock_release+0x3b6/0x750 [ 2035.787536] ? __pfx___kernfs_new_node+0x10/0x10 [ 2035.788220] ? __pfx_lock_release+0x10/0x10 [ 2035.788831] ? lock_acquire+0x32/0xc0 [ 2035.789410] ? up_write+0x1b0/0x520 [ 2035.789967] kernfs_new_node+0x97/0x120 [ 2035.790560] __kernfs_create_file+0x55/0x350 [ 2035.791203] sysfs_add_file_mode_ns+0x21c/0x440 [ 2035.791871] ? __pfx_dev_attr_store+0x10/0x10 [ 2035.792565] internal_create_group+0x322/0xb20 [ 2035.793246] ? __pfx_internal_create_group+0x10/0x10 [ 2035.793939] ? kernfs_add_one+0x17a/0x4f0 [ 2035.794551] ? kernfs_create_link+0x1bb/0x240 [ 2035.795178] internal_create_groups.part.0+0x90/0x140 [ 2035.795928] sysfs_create_groups+0x29/0x50 [ 2035.796537] device_add+0x711/0x1ec0 [ 2035.797103] ? __pfx_dev_set_name+0x10/0x10 [ 2035.797705] ? __pfx_device_add+0x10/0x10 [ 2035.798315] ? __init_waitqueue_head+0xca/0x150 [ 2035.798968] netdev_register_kobject+0x17e/0x3b0 [ 2035.799656] register_netdevice+0xd60/0x1530 [ 2035.800290] ? __pfx_register_netdevice+0x10/0x10 [ 2035.800988] ? dev_addr_mod+0x29e/0x350 [ 2035.801559] __tun_chr_ioctl+0x210b/0x3f80 [ 2035.802182] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2035.802842] ? __pfx___fget_files+0x10/0x10 [ 2035.803455] ? lock_acquire+0x32/0xc0 [ 2035.804035] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2035.804692] __x64_sys_ioctl+0x19e/0x210 [ 2035.805279] do_syscall_64+0x3f/0x90 [ 2035.805827] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2035.806566] RIP: 0033:0x7ff461a5bb19 [ 2035.807094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2035.809557] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2035.810602] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 2035.811582] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2035.812566] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2035.813547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2035.814520] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 2035.815537] [ 2035.899177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2035.901530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:58:04 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5451, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 04:58:04 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 04:58:04 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 75) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:04 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),!\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 2051.325518] Invalid ELF header magic: != ELF 04:58:04 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 71) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:04 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x21) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000000340)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x1}, {0x81}, @device_a, @random="74d543f5b2f0", @device_b, {0x0, 0x40}}, {0x4, 0x0, 0x1, 0x0, 0x89}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x6, 0x1f}}, {0x4, 0x0, 0x2, 0x1, 0x8}}}, @a_msdu=[{@broadcast, @device_b, 0x81, "c7aa4ace1ebe2aeb6db04ebe876e1b47b9634a77529a7e8224738f81dd23801032410542d02b2127d4be478f5f307bca7e07d1aef783411b9406151b29e739ff5af609e90ef5e2fbc7e1ceeeb6a8a92070bcd79ea3c3284c0c5ba997232a717984c4ec6d79ced3d99508715352084b9dc8a6c8fb739d37b357701e4b521e066f6f"}, {@broadcast, @broadcast, 0x4f, "9624230069440f00c5f7a0a0c173a6c48e14e9578793c1a2dac699ff3c4d0cebab66517a9db26bb73171e1b3bfd85cca568ee4a4e3a0506ae5ce7d57de1234e5c2fbc15604d295440f5783aea2e27e"}, {@device_b, @broadcast, 0x1d, "772c65c0e97df04fcb3c57466453d333e69214560a0c3b857adfd0ca68"}, {@device_a, @broadcast, 0xdb, "e56ca89e7f6eef81ef193295675e399e0338cb49631c9a731c142664a9da3a1cd1143035c9f1e9ce54ca861044c0bf75d560c71a3b9ecb183443ed7d22e45cd26e1bd9d8849b09df4fab2c7d54ddd82ce2877adb85697adb944458aae577cc7a1253e778b8c09427ebfe6fc90e3511cb3dcc49d94070414621cf570d82db41eab401ed50ac29f746965372a279edda3418e7797c0989b542fa829ddcc973e32b3e9453eaa7492ef82c36288b2be9426972543c7affc05a2f5c9e30673eacd80896c5e893312e9d66a8d115fab4d80864a03f85200f6e115897d760"}]}, 0x23c) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x20}, @device_a, @device_a, @random="1851b11e87d6", {0x0, 0x8}}, 0x200, 0x40, @default, @val={0x1, 0x3, [{0x1b}, {0x3, 0x1}, {0x6c, 0x1}]}, @void, [{0xdd, 0x7b, "a5d82c7662a8435032e59cbf99847b7b4465fa4216f2d930497ef51be80972ef5a20881eac3d3ed5341efda3598409653c25f28277083deafb600060f728db18c5dee2dc0795edfe405d27126e2ea9440615baa9f7db6dbed7864ad6f48bc827696ea2ab4d38651f3b9fa0f1708feb0e26f32f4edcf53aea2d127e"}, {0xdd, 0x44, "f68f69a58624d6477ed33912a28c60e46884641eca7554f6f8decb26f9ac2c50399083fc4e476a3b032692884967c5e726eb68b1eefa35f1937cf7ad81233f909af12a4c"}, {0xdd, 0x7e, "dfc904c3b67bf7aae0b96e75653b26b491e3e3257a255db9856f7fa7ef5a1126d51181a828dd8d32f105f3fc2c7944b5111a3fa562d4a35fba6e5bfd76aed3edf7d34ed6f05192a812dbe98420adc66cd4bab296732cd65e3efaa618dc92c7e7040f71a7e6b45bde0b718f1424babdedd891b4c6ece0f3987a072ae5feb7"}, {0xdd, 0xcb, "0413b82ef971672eed38e57892f397fdfdd02e329266ace936e6500acac0b1e925d1819b5094557f2ec89c7150a5fd55fb783b29eb5d4aa614ee108d9f570230088d1f4c2ff4f83d4609095cc6d56318cc554d2614420eea5d0e069437305727eb61c0d6c310b99f41db2b7371f2854e75af1d96fe8c5bab3d574803bd88483a467c02da67341aa2d860bbac54d9a8018434ecd3cf9662f9a2b3e4822f4a23b63bee217cbbe8c6c9730c9ac78ba7f8a14e46a44fe3c2fa845325afa88e37b99063fc1600eae1de93999f39"}]}, 0x233) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cf_end_cf_ack={{}, {0x1}, @broadcast, @device_b}, 0x10) 04:58:04 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 73) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:04 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 59) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:04 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),:\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 2051.369171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.374355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.391045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.410621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:58:04 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5452, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) [ 2051.510661] FAULT_INJECTION: forcing a failure. [ 2051.510661] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.512138] CPU: 1 PID: 11008 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2051.512709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2051.513248] Call Trace: [ 2051.513427] [ 2051.513594] dump_stack_lvl+0x8f/0xb7 [ 2051.513888] should_fail_ex.cold+0x5/0xa [ 2051.514181] ? __kernfs_new_node+0xd4/0x8c0 [ 2051.514490] should_failslab+0x9/0x20 [ 2051.514763] kmem_cache_alloc+0x5a/0x410 [ 2051.515054] __kernfs_new_node+0xd4/0x8c0 [ 2051.515355] ? lock_release+0x3b6/0x750 [ 2051.515641] ? __pfx___kernfs_new_node+0x10/0x10 [ 2051.515980] ? __pfx_lock_release+0x10/0x10 [ 2051.516287] ? lock_acquire+0x32/0xc0 [ 2051.516586] ? up_write+0x1b0/0x520 [ 2051.516863] kernfs_new_node+0x97/0x120 [ 2051.517159] __kernfs_create_file+0x55/0x350 [ 2051.517475] sysfs_add_file_mode_ns+0x21c/0x440 [ 2051.517808] ? __pfx_dev_attr_store+0x10/0x10 [ 2051.518140] internal_create_group+0x322/0xb20 [ 2051.518472] ? __pfx_internal_create_group+0x10/0x10 [ 2051.518823] ? kernfs_add_one+0x17a/0x4f0 [ 2051.519127] ? kernfs_create_link+0x1bb/0x240 [ 2051.519454] internal_create_groups.part.0+0x90/0x140 [ 2051.519832] sysfs_create_groups+0x29/0x50 [ 2051.520156] device_add+0x711/0x1ec0 [ 2051.520437] ? __pfx_dev_set_name+0x10/0x10 [ 2051.520763] ? __pfx_device_add+0x10/0x10 [ 2051.521075] ? __init_waitqueue_head+0xca/0x150 [ 2051.521426] netdev_register_kobject+0x17e/0x3b0 [ 2051.521767] register_netdevice+0xd60/0x1530 [ 2051.522078] ? __pfx_register_netdevice+0x10/0x10 [ 2051.522424] ? dev_addr_mod+0x29e/0x350 [ 2051.522710] __tun_chr_ioctl+0x210b/0x3f80 [ 2051.523014] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2051.523340] ? __pfx___fget_files+0x10/0x10 [ 2051.523649] ? lock_acquire+0x32/0xc0 [ 2051.523955] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2051.524268] __x64_sys_ioctl+0x19e/0x210 [ 2051.524594] do_syscall_64+0x3f/0x90 [ 2051.524886] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2051.525272] RIP: 0033:0x7ff461a5bb19 [ 2051.525546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2051.526822] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2051.527359] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 2051.527872] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2051.528384] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2051.528900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2051.529409] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 2051.529944] [ 2051.536183] Invalid ELF header magic: != ELF [ 2051.552425] FAULT_INJECTION: forcing a failure. [ 2051.552425] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.553318] CPU: 1 PID: 11010 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2051.553884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2051.554441] Call Trace: [ 2051.554625] [ 2051.554788] dump_stack_lvl+0x8f/0xb7 [ 2051.555076] should_fail_ex.cold+0x5/0xa [ 2051.555364] ? __kernfs_new_node+0xd4/0x8c0 [ 2051.555672] should_failslab+0x9/0x20 [ 2051.555945] kmem_cache_alloc+0x5a/0x410 [ 2051.556251] __kernfs_new_node+0xd4/0x8c0 [ 2051.556559] ? lock_release+0x3b6/0x750 [ 2051.556857] ? __pfx___kernfs_new_node+0x10/0x10 [ 2051.557192] ? __pfx_lock_release+0x10/0x10 [ 2051.557497] ? lock_acquire+0x32/0xc0 [ 2051.557783] ? up_write+0x1b0/0x520 [ 2051.558057] kernfs_new_node+0x97/0x120 [ 2051.558358] __kernfs_create_file+0x55/0x350 [ 2051.558673] sysfs_add_file_mode_ns+0x21c/0x440 [ 2051.559011] ? __pfx_dev_attr_store+0x10/0x10 [ 2051.559343] internal_create_group+0x322/0xb20 [ 2051.559677] ? __pfx_internal_create_group+0x10/0x10 [ 2051.560033] ? kernfs_add_one+0x17a/0x4f0 [ 2051.560344] ? kernfs_create_link+0x1bb/0x240 [ 2051.560671] internal_create_groups.part.0+0x90/0x140 [ 2051.561044] sysfs_create_groups+0x29/0x50 [ 2051.561339] device_add+0x711/0x1ec0 [ 2051.561616] ? __pfx_dev_set_name+0x10/0x10 [ 2051.561930] ? __pfx_device_add+0x10/0x10 [ 2051.562228] ? __init_waitqueue_head+0xca/0x150 [ 2051.562566] netdev_register_kobject+0x17e/0x3b0 [ 2051.562906] register_netdevice+0xd60/0x1530 [ 2051.563235] ? __pfx_register_netdevice+0x10/0x10 [ 2051.563596] ? dev_addr_mod+0x29e/0x350 [ 2051.563898] __tun_chr_ioctl+0x210b/0x3f80 [ 2051.564220] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2051.564579] ? __pfx___fget_files+0x10/0x10 [ 2051.564898] ? lock_acquire+0x32/0xc0 [ 2051.565206] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2051.565538] __x64_sys_ioctl+0x19e/0x210 [ 2051.565846] do_syscall_64+0x3f/0x90 [ 2051.566134] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2051.566515] RIP: 0033:0x7fcb82d36b19 [ 2051.566786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2051.568073] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2051.568624] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 2051.569138] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2051.569649] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2051.570163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2051.570672] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 2051.571200] 04:58:04 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5460, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 04:58:04 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 60) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:04 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 04:58:04 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8901, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) [ 2051.652237] Invalid ELF header magic: != ELF 04:58:04 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 76) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:04 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 74) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 2051.735839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.740148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.741778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:58:05 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^:\xe2&[') 04:58:05 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8902, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 04:58:05 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 72) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:05 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) sendmmsg$inet6(r0, &(0x7f0000006200)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x150, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x21b6}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000100)="701247258dd48d418449f10ca7cf920e8ad3246a67e50cd7081296cb4b0e56bb3f21716e9ffe7441fe88b04a5b8c1bced167efacd29eb8ff9633a578d6ee50e3e522e9605f9e84712f2205992ce3de245532c560afca72d885cd6f34a80f42b4567021dbd9c38e0f2ac444dd297e05f8d44b3ad28111423fc000f83e776b9710296b", 0x82}, {&(0x7f00000001c0)="81db90aafdcf22861ac8b28a89fc22fdf599771f24f50134836829b066cc9ce1413588becf0528f2f91c9f0e2b2ad6479580c71253e8f5cae5b29d34393696f582fb433e5e0caa650a2a39f2f1c2bd5a503db8870d648a1bd23565b1ed586276e4a5f299679af6ae50ec0d0fa43ef074122e59df6c13616270d9d6fbd94c2fda30d4ed61e4601bf0bf4e2690a8c7013ee2ad7181be1f0e7c2a7def25b51287ffbf8a1a272319904574faa30c2d8cca3dd28c073d0d585a8152d847dbdf3df96d5014c2d1d61187e1ce729406e24d88e55a2c8c23b530843c922cbf4e796c657f32cfb09c9b01d997444316", 0xeb}, {&(0x7f00000002c0)="2c3b5cf05fba586d53620fb8da3a28d8e450e3c11f121d6a8c953ffd63f30ef2d3c153dfad622136be40fd88985f46fbcee56ca716aa62c73861a66676f9812475ec6e4640561afe08e57a95cc5b7732fd314dccce4cb5f99e00bcc3e9b2ac89f2296457355c16089aa3dd4fe033c11c4780061014259dcbf3c08dd9ffa852f8075811116900bd77c47e0b22b4d332755f939d7b6132d1b696d9e0b02d43ddc55bad2cc315c7ae49e01fcf940ea4a59691a8b9da126bd8a3ff93a86ae264316e78d2c760296971ea35d562082351bdac18bd2327870dddab0f79dc7733228ba860", 0xe1}, {&(0x7f00000003c0)="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", 0x1000}], 0x4, &(0x7f0000001400)=[@rthdr={{0x58, 0x29, 0x39, {0x16, 0x8, 0x0, 0x9, 0x0, [@private1, @private0, @local, @empty]}}}], 0x58}}, {{&(0x7f0000001480)={0xa, 0x4e21, 0x0, @local, 0x400}, 0x1c, &(0x7f0000002a40)=[{&(0x7f00000014c0)="afc914155b8329b52062224a352462c2aadec7442d", 0x15}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="f13682de57bacbb6a6d4453dae6ed2138e0b0c195e352eb29341b04eb740cd574732445bcdda93293585f37d3befc8989be036141c763e51cf6cf4aae91d231a52fd9571cdfedd2a4001ff8d0adaf02e53bd345090e0fb3cfd3a40d432d6b6c244b536123852c719258000024b5a99056a4191893371654ff9525c3dc27aabcdae79b22b1a51b9b0e2f0ac2fc5daefe2664601f98541a08db00f95da0b9055fed1cd3203e0c8d4acb16414a71f7ed4d4523a47df51283732d4b982f7c3c60e30ab0b7ab87c1675c845d64e035a1b49017ba4", 0xd2}, {&(0x7f0000002600)="1c59b0d42ad2c882a8550d698ee356d75ed1d2a18fd7f1562704535e01e9", 0x1e}, {&(0x7f0000002640)="9f3d3a92dada75d603b02a91cb05959db3e1475be492b0527a616de95fae3842c0a720a34f1e19837ef6f12372c1233b95ab1be8150e1cbc0a328b8fa64467d6915ae2eb68427566cfd7a936eac84e2545051b0460fb68eefcd3fabd262b9252be22c7bf8d97dc2d5ea81df50136dd5839f57cfcb59651ad2512c5ed99e8872c6bff7d0929f2b3dd9be189965507376e148add21018b362e73499cf86b8df174dbcb93fbd4b9cf51aa748c5879f5846a540dcde62c9e0dbc0558b2f9849d9db4f71b57325657934fa1f8cf54a53681493bd0219870bb5f44701c9884fb8ef25ddef7bd8d556d71817de49f1a7607ab", 0xef}, {&(0x7f0000002740)="cdbf2aa6ac751c34d82445347e998f91999987ea500123a62936f1d2524214ec730dfc6e1e624d2fa26d499516d357a55a30dda2396a713013ccfe590d3121e0813d8f1041b08dbd0996d6870c9e03db29af24c8f251666ad13b320a15dd4bba057b1d8e58e791ba0ed08b83b19fa0e71d9b81d87e5fc1ed0a7d9c7ee65d0964f60cfd3b05af40ecb42a0f606b0b0bcc372c4a6dd71f056d4509", 0x9a}, {&(0x7f0000002800)="1b56a085718764e27c7536c1bfab717d75c0e4f7d1cbeaa95948c546316a388cce9e1bcd9289de93bf7ffd32c1a90ad680a752470eba5e75c37f4a0de90cbdef64ce1d9c5735a2b22c540b3960ded8a7e69935227ed532350a121f964baf15e0ab0dc1e769bc1b486064e42aa113fb494ca77daa639935360274ee010a2826fc524640f5ad41a66925d676e1701642fb8975e9a5f505bf342c93f83b1d26c5ac8b9b9d7ba93437bd826cecd458dc1c7666e2f60a540612b996bdf74bedecaee6de71", 0xc2}, {&(0x7f0000002900)="a0", 0x1}, {&(0x7f0000002940)="a4c56cbbb031f9b41a864ddf5593655b97bb4bd9d521206480e742012d312bf8c02ed7692cd4c0a7052908462b16bf84a6321026eb329b00b726b54d3b6629e15190fdeb4eb03d5476388bedb4fccbb1541f6cac88f996c37adbe857cd33d9a52d43836d5dfc8b4bf165db5a2a650bf1689df233f787620f76234efca40b0c9ad64437a7d194e95a634c27c54ae97f4d0ddda28e671546bc71765624090b61a853ae1801d8a189bb77a0bcbc228c6cf2d4f03da39798669e597464d601a7f23c5a26e885a8c5daf46e9d734c05d4f50b1da5cb86a6978c365a968115b06404a4482b7c37ac18228a82582ad116a5b93b670c064b6087", 0xf6}], 0x9, &(0x7f0000002b00)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x2, 0x0, '\x00', [@ra={0x5, 0x2, 0x8}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0x38}}, {{&(0x7f0000002b40)={0xa, 0x4e23, 0x40, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xbbd}, 0x1c, &(0x7f0000002d40)=[{&(0x7f0000002b80)="a4669c9c29d3fbd5c33906e287866798566dc74d41afc8e6aef8d09fdce1d5", 0x1f}, {&(0x7f0000002bc0)="b8904b23cc2ff6638d890e7bb3a97c0ce45c6b62eff82f3a9837aa977669304b939a9237c020eb435994b0e772", 0x2d}, {&(0x7f0000002c00)="154cde1cc7029463936ddcad50996a7b2b12081b4e800e94b03ffbe9bdae2a2c65f584cf9d4effe58b06a06847210fb2", 0x30}, {&(0x7f0000002c40)="9adf823a657028d74432469ab64becf006b2e6ad6d180df0a0821e35766a72876810f4429729a9110af5a9eeb8014a165605aa5e4e7e256c7c155748e66f16c4de762c4c8cc42f4b6ac2e7ec5f061d2091ad1a47a9d4ddc1aa134f6a31b6fcc4cca144b71dbe8db665b880985515", 0x6e}, {&(0x7f0000002cc0)="3e129f888de8f746849908829f88aac6574f5b1b77901685854d5761e90888fd2bd7f2399fe8d892db6eaa100385448d9db59494d7414447e3755405245d56b8de7d61ef18a80f5b5b083ce1677c17b73cc519509f191fed99a39b5b4453c96aa1edf4acea5fbeb82d9ef056b4bb7eee43b3342f634a9391fa8b00935c7c", 0x7e}], 0x5, &(0x7f0000002dc0)=[@tclass={{0x14, 0x29, 0x43, 0xffff8000}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x62, 0x2, 0x1, 0x4, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dstopts={{0x68, 0x29, 0x37, {0x214a547e6baa9013, 0x9, '\x00', [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x28, {0x3, 0x8, 0x4, 0x101, [0x3, 0x8, 0x10001, 0x3]}}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hopopts={{0xa8, 0x29, 0x36, {0x3b, 0x12, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x8001}, @pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x2, 0x6, [0x3, 0xffffffffefb4e4f3, 0x1, 0x352636ee, 0x0, 0x7fffffff]}}, @calipso={0x7, 0x38, {0x2, 0xc, 0x5, 0x2, [0x9, 0x10000, 0x3ff, 0x1, 0x5, 0x6]}}]}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x33, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @jumbo={0xc2, 0x4, 0x77}, @pad1, @jumbo={0xc2, 0x4, 0xffff58d6}]}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0xc, 0x6, '\x00', [@generic={0x1}, @calipso={0x7, 0x28, {0x3, 0x8, 0x9, 0x6, [0x3, 0x5, 0x1, 0x9]}}, @ra, @jumbo={0xc2, 0x4, 0x6}]}}}, @dstopts={{0x60, 0x29, 0x37, {0x4, 0x8, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x81, 0x12b, [0x8000000000, 0x10000, 0x9, 0x0, 0x8000]}}, @hao={0xc9, 0x10, @empty}]}}}], 0x270}}, {{&(0x7f0000003040)={0xa, 0x101, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3e}, 0x1c, &(0x7f0000005280)=[{&(0x7f0000003080)="d8778afe00643328502b6494cfa51b6d24ebc62b544a902cadf263ab2942fbf92dbde1c3aa8f3533053e4bacdd3106d82fab9bbda5d5dcdf6ac1ac0503d2257c24a2406965b4f40ebef4ffbb3cad2c1bba3fb90e90", 0x55}, {&(0x7f0000003100)="9edf2e7a85649ff341816b539c319ec6e36604c194fc950f3ce78208fc6a86834614870fdfc015dd", 0x28}, {&(0x7f00000031c0)="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", 0x1000}, {&(0x7f00000041c0)="788105900bbc2ae02f706c6c86f588f0abe0b3eb8c6dcfdb274e01a0d2fe359ee2b9fcc408005084d92b3a5b6da0a8c021de990ed6bf0b3ca271d292b7bdf045ff8eeb7338b5b08c54ce66a5f39927d16b61bf52e50eb1b95d5de6357d6e0a714207ef", 0x63}, {&(0x7f0000004240)="93bb0be05830ca93e3c55e29faf64eafd3195185b0aafbbdeab9aeaa68", 0x1d}, {&(0x7f0000004280)="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", 0x1000}], 0x6}}, {{&(0x7f0000005300)={0xa, 0x4e24, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x1}, 0x1c, &(0x7f00000058c0)=[{&(0x7f0000005340)="e90b48a3be29d5c5d94f74affe928efcb477d261b30e15369f794d04500e4ed0ee68174334a53a620058be20985d4cbe788a29c342e1", 0x36}, {&(0x7f0000005380)="da5520aed2325ab18b94fa65d54cdd22f0a664777f775efbd161456b5a4f42f58c902754859c7715cc083c2de6dae0ec069356840e6a19be166469d31bef459a4bf68b7a", 0x44}, {&(0x7f0000005400)="c626c9947de0e8cc5fd3532a53ca10ddf32d4e80fb2e425371cf29a1b646dd9c48732d42cfebbe5fd0b2d39d81700b4f9974fe5107739ca82e567a33a55bb5c04c0fab20e96d2d450347247af3edf8735ed5233a4bebbb953884a810234fd55a0b7bf4064a7dd2b2e5bb18455a9178dc11dddec7592e2339a4bd6b2f34bf134205c16c66d876311c7c17a726b042bfa64df463b278d968c7ca205a732b0141789796468ca3f2c1cb299e0dd1b827cb987a4be6326fcf3c67fa6d438a20", 0xbd}, {&(0x7f00000054c0)="f563cfb8426e1b74e27ad9696b3c2c6c0d518845f76a36ff063bdd5fb4cce0e86b80b1b8fd63c7cfffd7b663ce145bb2369f099668443bffc4312ea9aee94e88f9698679ce56b6b86ac7edd98abcc60aeb4b50fc207f111c8a20587dd8f906504c5fd8201700a5078f6c77b821892fe32b8a5a678eb6d8516be042168315ac8782b5bb4a069fe88f9735376ff7b4c86bb026bbfc664df0e565522704f9401c5817240480e91ca9569ebddc12c7173be205549fa87258a7b16e114b4fcd93ae297652f7afa6e21f7b2b11ac60df29ae739ff6c7ab7a5f81afb1ba95758b4b174d70afc2749baf0a013ca069cbc0cfca", 0xef}, {&(0x7f00000055c0)="aef212122ef820e7d382e5d37dbae95a095373dbc33518ec09440294c7a2aaa1949f9e1211731df730d0e87f73167856f4466fcc2f104f7aebdbf243c9945f3de165c6129a67494cdc07711ce54a1a4de23d3ba3a73b578252c706fba7c713232dc85ba923fb92bfe79bacbd1777967f", 0x70}, {&(0x7f0000005640)="6d5c340c3085d0fd4f570122ada4447a67429b931f93cc3dbd0045af33c7874d6997c457fe37c624ee2e6a9ee61e8e66f6e583da8dc0b2bfc9728e927abb38dd4e1950b8b87c7bce091e0f8566a400ae2b701a25c75f9258a5b4835532966e9330b7776442afcdc0d9e2479d74a4ff22428b4ed1a54552bb95e9fa834a16b018a7a485f6d634896283bf752293ea0e5f56454286e4b08c1a952ad5c07276f970e5c513b4392d2d135daf8f97c7216381961467f2841c3e0416d6cd6416076c16d02f8e8bc41de013a826c10bdb096d1fd794", 0xd2}, {&(0x7f0000005740)="ed17dc33bc602aa6c9855787ddc305561e952f3db45f950080520c780aa1a99b0d72d984ea9d2ae2dc6f37761d05756c2953d8d82a25c91ec53c20096c6270e9903a9ddd38c382d465a2a8423742734a8361e1996f36e4b8ca2fcc88695bf686a7e5af737728d42460ede51dae4f4ac7664b6e85d45ddae277dbb8ef6ba37111365474d45a6a6f5e86bc005433ff869d80801b8888df0eb09925256c812358a65833e26c6065fd58bf", 0xa9}, {&(0x7f0000005800)="d2228309153c0684019a21", 0xb}, {&(0x7f0000005840)="fd098d09d71eda2eca7fdcd6992714d32b08ace30063f777a456772f29601ae852179733250088fac0c28725e18f76c846a1123f789fe5fc68b28976c32bc282cb987fe048213aa82c2af59670ce4fa41d2ad9d09a9975aee7a7793ad1d999dc988580feabd9d80368acf79eb99e53f42dcfae238eb2e00f06a127953e", 0x7d}], 0x9, &(0x7f0000005980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff7}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x6e, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}, @pad1]}}}], 0x48}}, {{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000005a00)="808e4f52f57dc6e38a84c7f606d274c4c1de484eaee1573a8a4b01edbb960818400f3163130986fd6adc20984a48142477d3f6e134a4ccd67d1714a3002443f0c61e1a69bd3e1ccd3813d537e68ebd31d9218f6d7d2211d6fe4c1be726a0848eacaf44bbd40679139315dd7725cc175946c25499a838e88f623c3e28c2ff9b23d2ab5ff54f1d58dacd62c0cfae190a8ffb76d5cd49d3a30a249a868f990bd1efe4e5bdf1a09151ad0c", 0xa9}, {&(0x7f0000005ac0)="da29701d76b77daa9c2ceb9f182a5adcaffa626c60b54b268f43117c3aac47d309c25d993437d806ec61173c8f65db02d58a4237a1a7aaf1e426dd6e8bac462b994ab1d775ff1a8650baf80dfb7e842b850b9d4a4a66ca72a1b63ac79c3ecbe990b39206afd6ade481323225798a0419037edd156d5cebbb2732cbf4656c27702432b30e8ead38853cec33abc689a25db854b577946164317f12dc9059517db64b425b856311a17c4a57ae52b2f0de05036ef7182760c9751cf09939aa23ac09cc444ed3d87416902a5adbd6ed768db82f1537baca57f9a80e7d9353", 0xdc}, {&(0x7f0000005bc0)="fb2817329aa9702be011d8a538e87dfbe5f41a9b2de7a1ce08b0b53408087d5a302ea4ddf473eefafaf82593eccf4b0858dae4b77af59491ab741c09c239403e2e07b7a7466cc3acc3cbe6bb41a69ac63025215991be35c0d3c7afe83c1d1fdca448769d82af408ca65997b05332b76ec8f631ca921f9739c3b27ab08f7dc9ce2948afe56ee5e4db785a482f749875d7a782153491b188afb14d2e2ad0df17def847d22d00a4203cfbc1c959613324efa2f26d1cee0c33ea4a5788dbd62784efd66608", 0xc3}, {&(0x7f0000005cc0)="ef26e6afe6837491bd8ba96a8eecdb14b36396fa113a38d779e6e4d87732b8f770ae7756742b2385ac10689fd55d8fe20ad82a9ab05745b30e0ed7014439af8ec1392e4dda54116b1264c41f6b07f9b8c4d9e91f", 0x54}, {&(0x7f0000005d40)="4cbeb4e274b14c754f760f4b2ac18c3355236581d1b2328aa4b8aacf0171382602acc32e24f13efd3c492e3ae45dab6bff7768012da2db7af2ccb9fce023c088a3666a754930b15407930209a76ab90dd7a3af75af196681676d322d38ab44bc150d9449f2664f40499c41d6ef9e1ac8b9d8a57d24ab1c4523300a6bbc6bc56a21e048e16ae0af68c98a8e9b13646ab936bb19b383890acea74f1121219f37e50d794f89eca34492ed26ba3a045095d755acb074e20452b8d71e62c89de9ad20b25ca71b5dfd959bb2c298e5c92c36b3c3db93ea63b68da015e22bd6a9", 0xdd}, {&(0x7f0000005e40)="90ac1c349b52e4eb3c1a901416ce5c1ecf556bc72bb7bbcd10f3f3b8402a6aae62e8c8b0077af16b0b5a402440cd8059ce2ac4b8516bca74d518eb2b3cc4fb3756022d31c51f860bffbb49d429dc47269d8f65f3435bac095536f23cb878b0aa2dc2729018603c85ea1dadcbd4865ca8069f4c5e90e55d99f6d69cb2bfdc73c18b31d4dd198d0ed97061682a52cb971408", 0x91}, {&(0x7f0000005f00)="2da9e045d4da48b6f2f8605308f706ad35cbf28908d0f4d65177ad6b04e8116e03c3726d9e895d554bfca188d9125f612a210bba0e34f66bb8d1f3699d7b4146bab735632926e96db4b4df13a023d5f824c773389cb397bd10cd5e46958a042931918f47236173e513f3fd15cba2", 0x6e}, {&(0x7f0000005f80)="90b632c052deed9f03839cb57f4f0fa1b841f01e2665e89df1a583a3be2cd2cf992810bd37daa29ec49ffc6bee92333ff356051e6ef13a367b0657d3b50f9c308424c1e4839042a067e780e3676bcc0722af6916d7e5e3858122fb34ab6767377c0a3bcb8e6440170d891bbd928692fc2059f549c406ccf87b64a867bb82c010dc5aad100522c7744b0fc9e5f0b2a5904c17b3921a306a9b8bf299c0cb4c89606ba61d8e02152c139e645fca70f833501046e455c2ccd4f9120051d2", 0xbc}], 0x8}}, {{&(0x7f00000060c0)={0xa, 0x4e23, 0x2, @empty, 0x3}, 0x1c, &(0x7f00000061c0)=[{&(0x7f0000006100)="40612e16fc8e087731c433ad0af77fff6bfcd80bce7d99eb46a1f9a4410d9769a71e5328d6377f", 0x27}, {&(0x7f0000006140)="6e0ae0fa58d1b1fd87497ead33d0e5565865c75e5e81d173008cd7e9901505083cb2e64a2e17d960693832c8fa2f53330ed72252002f20ff778b4ce45158130aef31d48e08c7b654ba676c2fc933669f7252be243aa4105a3a6409f8772d009b061fec0deb84a6ecfbb1e1", 0x6b}], 0x2}}], 0x7, 0x40001) syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1}}}}, 0x21) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=ANY=[@ANYBLOB="9400e4ff07121100000008021100000007300050610076b055c6c5fab1e400b06a00f3c7daffcf2cee7d00600b02000000010000000000600000fda274f335420fe4"], 0x42) 04:58:05 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8903, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 04:58:05 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) [ 2051.907379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.920278] Invalid ELF header magic: != ELF [ 2051.921637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.969645] FAULT_INJECTION: forcing a failure. [ 2051.969645] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.970716] CPU: 1 PID: 11042 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2051.971287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2051.971828] Call Trace: [ 2051.972018] [ 2051.972187] dump_stack_lvl+0x8f/0xb7 [ 2051.972488] should_fail_ex.cold+0x5/0xa [ 2051.972795] ? __kernfs_new_node+0xd4/0x8c0 [ 2051.973130] should_failslab+0x9/0x20 [ 2051.973403] kmem_cache_alloc+0x5a/0x410 [ 2051.973704] __kernfs_new_node+0xd4/0x8c0 [ 2051.974019] ? lock_release+0x3b6/0x750 [ 2051.974324] ? __pfx___kernfs_new_node+0x10/0x10 [ 2051.974664] ? __pfx_lock_release+0x10/0x10 [ 2051.974963] ? lock_acquire+0x32/0xc0 [ 2051.975251] ? up_write+0x1b0/0x520 [ 2051.975523] kernfs_new_node+0x97/0x120 [ 2051.975815] __kernfs_create_file+0x55/0x350 [ 2051.976137] sysfs_add_file_mode_ns+0x21c/0x440 [ 2051.976480] ? __pfx_dev_attr_store+0x10/0x10 [ 2051.976818] internal_create_group+0x322/0xb20 [ 2051.977147] ? __pfx_internal_create_group+0x10/0x10 [ 2051.977506] ? kernfs_add_one+0x17a/0x4f0 [ 2051.977812] ? kernfs_create_link+0x1bb/0x240 [ 2051.978139] internal_create_groups.part.0+0x90/0x140 [ 2051.978505] sysfs_create_groups+0x29/0x50 [ 2051.978819] device_add+0x711/0x1ec0 [ 2051.979100] ? __pfx_dev_set_name+0x10/0x10 [ 2051.979425] ? __pfx_device_add+0x10/0x10 [ 2051.979727] ? __init_waitqueue_head+0xca/0x150 [ 2051.980090] netdev_register_kobject+0x17e/0x3b0 [ 2051.980471] register_netdevice+0xd60/0x1530 [ 2051.980814] ? __pfx_register_netdevice+0x10/0x10 [ 2051.981174] ? dev_addr_mod+0x29e/0x350 [ 2051.981463] __tun_chr_ioctl+0x210b/0x3f80 [ 2051.981785] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2051.982128] ? __pfx___fget_files+0x10/0x10 [ 2051.982443] ? lock_acquire+0x32/0xc0 [ 2051.982743] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2051.983072] __x64_sys_ioctl+0x19e/0x210 [ 2051.983377] do_syscall_64+0x3f/0x90 [ 2051.983669] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2051.984052] RIP: 0033:0x7f2e2b599b19 [ 2051.984332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2051.985599] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2051.986142] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 2051.986648] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2051.987147] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2051.987649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2051.988149] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 2051.988692] [ 2052.011091] Invalid ELF header magic: != ELF [ 2052.225133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2066.204922] Invalid ELF header magic: != ELF 04:58:19 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 75) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:19 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f00000002c0)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x80}, @device_a, @device_b, @initial, {0x1, 0x40}}, @ver_80211n={0x0, 0x8, 0x3, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x2, 0x4b, @val={0x10, 0x1, 0x70}, [{0xdd, 0xcd, "3085f0ecf24ccc5f968c12577d6e90cf6ab955546806fac1a76bd96d5f908c785cc03321e88f490b5c21fb5a21eb32fc85310737cfe189f317cb47e87dce0183d27d538cc5b3043d6297878fd947babc4c705133fcd3331ef2acc3ec53f6fc4d7eee914656b594ca66549ef7919512b75e36cd9d6d0d9132d02e97d3d444768305cf130d493f4082207f00bf3c82c461243cb8e276062861ce966cf808ba8cc7161a46cfd8f4013d20e15139cb04eee6dae6406a21f5184d54ec364256d03b2088b0fe4bed14922df9d8023240"}, {0xdd, 0xdb, "cb4d105a880471d5a76209323f1ae898978b543bf1564f44f08d3c9de7184293c9965406e4b603f95c682531036647cd12dd164c3db062be6951cfd6e18bf726c50ed658ebe33e9daeccd31d119938fe29af8a478c8a5dc4814e41467ba55c3a4f7820750cd90dbb047e244768f56b325c936e2130a6a8781e0f66ffb9f90a7ea53752e15a02871d71db4a5b764a9e00abd939673111f54252681c9f3acf25b6879897334790ae435fbf17057eaf4cd4496078785b732ed45474c45a5a373ebfa41911faea72f71276c535fe83a896bf7f8febffb262e906e5f6d8"}, {0xdd, 0x81, "8a87b209479bdaeba284501fa4fde43882d2db256fb24a231687e6372697d7153e37198f13c322b4dbca6271f909deb489808ec8ddbbea97f145e1f8466157937a015cdb9321c573c430dd663437fcd9edb5806cfc93cd9e740ca455597524f1c6a64c7296dc83946e5639b03b8716c0f51c3af30be860bc7c1951c5a8717968ea"}, {0xdd, 0xa, "c521acb31381c3201fb1"}, {0xdd, 0x98, "173de5085b1ed6afc6bc89973383bf0976eb7cf8876909839410190433a50d553b049524452e26621da98332c8c9061909ba002ea26d2cd39cad2cd57b30c7478276bbba7fc3919c0a655b1a39f1b1acd10550974759e567459f9b5c41285cba103cf8a6d7adeeb05aaafd540e453d64e22fd1c3e8d2e681dbb2a9e32c3c0dfa0975444f9d516eb509d9ee173693f7f0e009a8c3dcbfdb55"}, {0xdd, 0x95, "0bfadc4d9843062d9c5c036336fc496230358ca216adbc47ab54c113f9bfdc4ef14e1ce45b911ba2ab6b16c6b0e5112fa0ff3beac0c79cc1d61d88e5ebc9f9db97af455f114f564bbe84f115c2672f3ce27b50c159c06a4b4d94edd192247b5af7e78c6100824117fdb778fcf8030fffbe06ca6a9d23ae91ecec1222cf0c2fe2bb9a9acb8c1c5301c93537ccc7ede6dff0e6bf9c33"}]}, 0x391) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x40}, @device_a, @device_a, @from_mac, {0xb, 0x39f}}, 0x1, @random=0x7, 0x14, @void, @val={0x1, 0x6, [{0x2}, {0x36, 0x1}, {0x9}, {0x16, 0x1}, {0x1}, {0x9}]}, @val={0x3, 0x1, 0x91}, @val={0x4, 0x6, {0x0, 0x6, 0xfffb}}, @val={0x6, 0x2, 0xdf}, @void, @val={0x25, 0x3, {0x1, 0x95}}, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x6, 0x74, 0x2d}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x64, "75806eef55be73db68dee53b908df60cf048408ab8c156db2ee00623a9cffe32ed82dff408ce861cbffe22c273dedeca9aa95e137266c89ff0fdad855da6f7eeb43efc2d06fa073fed48d1637266015e83abdece6f75358d36ccedf6892444e70b7a1fd8"}, {0xdd, 0x65, "82cc2714aac593ea2349f650397534c84d8d63320fce3fc3111ce4a9aef4a653286188b8b8d08af8ceea6749e052d951e49bb130b0bffef099e3e1c396d21a06e67b69bb5847cc471c7b18ed6367c2e5e65b9753e0c160a723626772b601828ad12777bbb3"}, {0xdd, 0x5e, "23098ff3057353c7bcb6519496e28a49647f483228527fec334d5bd73ae486eb570f6bba6128fc2c8bf169040e87551b637b8b41460d8fa2dbbfea1c67693cfe16a8600414db5170547a592f85ae23abea570b76fed25d2cd8971ae48c66"}, {0xdd, 0x87, "be51d269de5068fff1f1d14e36460bb91bc96e5a44d1f2372256c9c0a7d56c0e46cbadd71b6041ebf07d71f822024b0ed37fff5f0e3d1af9d6c7ee2af79ab8d17c3b7d2265d58dcd3dd3183378b3d4e6705746ef8cc915fd14220e337670dc4e7b2fb9391aa8a1013af8af9559c367861eb6c1920141abbd06214222a495c38663f949211442e6"}, {0xdd, 0x59, "d1f3a4b6fdc36b13fa1d6baf46d0ece2dd832842d918a4cffaeaf32d540b12ad8313fec3abab6d7de4f44b8871e001206f98e33a6194bf6efcf90662c4d6c7c73834772007ab73c1d5f5fd90aa900eedd40c50e45824546019"}]}, 0x262) 04:58:19 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2:[') 04:58:19 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r4, r3, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 04:58:19 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 61) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:19 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 77) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:19 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 73) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:19 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8904, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 04:58:19 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&\n') [ 2066.284899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2066.301755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:58:19 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8906, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) [ 2066.412364] Invalid ELF header magic: != ELF [ 2066.452569] FAULT_INJECTION: forcing a failure. [ 2066.452569] name failslab, interval 1, probability 0, space 0, times 0 [ 2066.454338] CPU: 0 PID: 11073 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2066.455376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2066.456421] Call Trace: [ 2066.456794] [ 2066.457102] dump_stack_lvl+0x8f/0xb7 [ 2066.457635] should_fail_ex.cold+0x5/0xa [ 2066.458180] ? __kernfs_new_node+0xd4/0x8c0 [ 2066.458752] should_failslab+0x9/0x20 [ 2066.459265] kmem_cache_alloc+0x5a/0x410 [ 2066.459827] __kernfs_new_node+0xd4/0x8c0 [ 2066.460393] ? lock_release+0x3b6/0x750 [ 2066.460942] ? __pfx___kernfs_new_node+0x10/0x10 [ 2066.461586] ? __pfx_lock_release+0x10/0x10 [ 2066.462158] ? lock_acquire+0x32/0xc0 [ 2066.462704] ? up_write+0x1b0/0x520 [ 2066.463235] kernfs_new_node+0x97/0x120 [ 2066.463807] __kernfs_create_file+0x55/0x350 [ 2066.464423] sysfs_add_file_mode_ns+0x21c/0x440 [ 2066.465085] ? __pfx_dev_attr_store+0x10/0x10 [ 2066.465723] internal_create_group+0x322/0xb20 [ 2066.466376] ? __pfx_internal_create_group+0x10/0x10 [ 2066.467077] ? kernfs_add_one+0x17a/0x4f0 [ 2066.467672] ? kernfs_create_link+0x1bb/0x240 [ 2066.468304] internal_create_groups.part.0+0x90/0x140 [ 2066.469028] sysfs_create_groups+0x29/0x50 [ 2066.469627] device_add+0x711/0x1ec0 [ 2066.470157] ? __pfx_dev_set_name+0x10/0x10 [ 2066.470759] ? __pfx_device_add+0x10/0x10 [ 2066.471318] ? __init_waitqueue_head+0xca/0x150 [ 2066.471994] netdev_register_kobject+0x17e/0x3b0 [ 2066.472680] register_netdevice+0xd60/0x1530 [ 2066.473314] ? __pfx_register_netdevice+0x10/0x10 [ 2066.474001] ? dev_addr_mod+0x29e/0x350 [ 2066.474562] __tun_chr_ioctl+0x210b/0x3f80 [ 2066.475165] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2066.475810] ? __pfx___fget_files+0x10/0x10 [ 2066.476407] ? lock_acquire+0x32/0xc0 [ 2066.476990] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2066.477608] __x64_sys_ioctl+0x19e/0x210 [ 2066.478190] do_syscall_64+0x3f/0x90 [ 2066.478741] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2066.479458] RIP: 0033:0x7ff461a5bb19 [ 2066.479980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2066.482383] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2066.483400] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 2066.484361] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2066.485326] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2066.486284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2066.487249] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 2066.488257] [ 2066.601625] FAULT_INJECTION: forcing a failure. [ 2066.601625] name failslab, interval 1, probability 0, space 0, times 0 [ 2066.604198] CPU: 1 PID: 11078 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2066.605206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2066.606196] Call Trace: [ 2066.606535] [ 2066.606836] dump_stack_lvl+0x8f/0xb7 [ 2066.607356] should_fail_ex.cold+0x5/0xa [ 2066.607890] ? __kernfs_new_node+0xd4/0x8c0 [ 2066.608460] should_failslab+0x9/0x20 [ 2066.608990] kmem_cache_alloc+0x5a/0x410 [ 2066.609527] __kernfs_new_node+0xd4/0x8c0 [ 2066.610070] ? lock_release+0x3b6/0x750 [ 2066.610587] ? __pfx___kernfs_new_node+0x10/0x10 [ 2066.611210] ? __pfx_lock_release+0x10/0x10 [ 2066.611762] ? lock_acquire+0x32/0xc0 [ 2066.612319] ? up_write+0x1b0/0x520 [ 2066.612873] kernfs_new_node+0x97/0x120 [ 2066.613447] __kernfs_create_file+0x55/0x350 [ 2066.614058] sysfs_add_file_mode_ns+0x21c/0x440 [ 2066.614703] ? __pfx_dev_attr_store+0x10/0x10 [ 2066.615341] internal_create_group+0x322/0xb20 [ 2066.615992] ? __pfx_internal_create_group+0x10/0x10 [ 2066.616700] ? kernfs_add_one+0x17a/0x4f0 [ 2066.617293] ? kernfs_create_link+0x1bb/0x240 [ 2066.617873] internal_create_groups.part.0+0x90/0x140 [ 2066.618599] sysfs_create_groups+0x29/0x50 [ 2066.619198] device_add+0x711/0x1ec0 [ 2066.619728] ? __pfx_dev_set_name+0x10/0x10 [ 2066.620340] ? __pfx_device_add+0x10/0x10 [ 2066.620935] ? __init_waitqueue_head+0xca/0x150 [ 2066.621592] netdev_register_kobject+0x17e/0x3b0 [ 2066.622255] register_netdevice+0xd60/0x1530 [ 2066.622881] ? __pfx_register_netdevice+0x10/0x10 [ 2066.623555] ? dev_addr_mod+0x29e/0x350 [ 2066.624075] __tun_chr_ioctl+0x210b/0x3f80 [ 2066.624663] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2066.625300] ? __pfx___fget_files+0x10/0x10 [ 2066.625888] ? lock_acquire+0x32/0xc0 [ 2066.626453] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2066.627074] __x64_sys_ioctl+0x19e/0x210 [ 2066.627644] do_syscall_64+0x3f/0x90 [ 2066.628171] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2066.628892] RIP: 0033:0x7f59fcc15b19 [ 2066.629392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2066.631753] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2066.632770] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 2066.633723] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2066.634651] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2066.635592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2066.636528] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 2066.637529] [ 2066.641388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2066.729557] Invalid ELF header magic: != ELF 04:58:31 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8907, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 04:58:31 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 78) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:31 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&%') 04:58:31 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 74) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:31 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000003180)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1}}}}, 0x21) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @broadcast, @from_mac=@device_b, @device_b, {0xe, 0x450}}, {0xa, 0x0, 0x1, 0x0, 0x4}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @broadcast, @device_a, @from_mac=@device_b, {0x3, 0x6}}, {0x5, 0x1, 0x0, 0x1, 0x9}}}, @a_msdu=[{@broadcast, @device_b, 0x38, "bdbd9bed0b7420419e6dd2011f736ec584962bde6a0ee138ccdf24d82846c12fd941e8894706382cdf17731dc2bc4f7b07635c5ed439c22a"}, {@device_b, @device_b, 0x6a, "4436bbe0b8201e8faa24ba8a862f74618958df8b6171d98eeade4cc9a622019d216706a6b5b86e0d55c34fcca58615d592ee1aac4cb8c8047e66f56e404cb3750aa19a5c7ba3407c03f34f9d0897082a20bd254239d2cf855dfbdcd171966d9f593a4023916ee0f56cd4"}, {@device_b, @broadcast, 0xb5, "a568bd22d172eef810ea0ba621cd65d600194a78e542e43b3d5c8c3b28c90a1770e32ae64792b0d18ad7c97b03b7344f46b7bc00c2ed2b493504efd5757f5420aa158ea6f142059166019119443886cc8799e0d00ff6b0e152ea018ff40cc124f01cecbf7c289dc644b1e734fc978523500c1a50bc5dc89d597bc712446fc92987095ed2634686fe2f349bc84b259ff3c20e11d933d6987ffe09404f88db213e050a4471a6a080bce066c8ada0764f2850f9399e3f"}, {@device_b, @device_a, 0x25, "4d6ecf628b0d523e809cb7c7ff7622b95beab1215fca0170cd797b7caccff9e00236def167"}, {@broadcast, @device_a, 0x10, "6b04fa9f51d169f005716d15c6ebe5bb"}, {@broadcast, @device_a, 0x26, "d04f9333a8995e7c4d8f3ff9dc56acb8bbe47cfd75ea4c3c3245ac1f25d6b4a73d59a5387111"}, {@device_b, @broadcast, 0x6b, "6b05e8d9e0d26d23e50b746a93a112665a422a9b1645fd9fb77d613e8956e2cef8339e4d73d90e04c90a81a18a1503e0e78b3051c1fb9ff68be26d0dca9bd0b8dc32d37953eeca822e8fa6218a15e5b2d29e4862de4866cf3822ac41e09e28724d6bc99a26b58102960cba"}, {@device_a, @device_b, 0xe8, "bd3cf4c5dbc4a676925273650356a856100d809ee434e23d8f9708d3dd26f5318f7c2f633c6ec85486094c0d495148c368fe22d6c98f32342ea69c41b0e67b8441cc9109e7ff6ac093169139d2e8c42d1df482df082dcd19c4601b1e3daea0eaeff12424182ffbf6237b8ca0e2774f43c547b962a9e410ae9c5cd9cb9afc9db596e6af95c4ba0e7f3449a3fb0022ce2160586cdd9fb926a34e1478bec5985b670dc7e7a82856e3c5bdc1eea27d94b45f38a89315f9217341d9702814cfdee39022f189a17e42e0ae162a055c3746f2d226b2597a2961ac0745175947430de4e6499d1f160fb6af7a"}, {@device_a, @broadcast, 0xbd, "926e40cbf9654f19edb612e1d3f057fc88985a29353a9613cf2aa456771661dac69f378fae7efa5741c5378fd78bf9328bf089261f04317f371fe3cc83a3caf8cd43e1f10ba5cd2a811faf8883a0d131995d6214245ceb73220bf9467216656b37efd956a512170717340688de3c312d95f6d50650ca1b5e07370d694d3c3d5d42b8e45c9592a4e1f995c4a3c4f1dcc9337089e104e46a2ace317f7efee8e71ed87d3a6c5ee525b87e15f83155a86efd70f0479cdc043bd680bb5d8240"}]}, 0x480) 04:58:31 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 76) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 2078.579904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:58:31 executing program 4: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000000100)=ANY=[@ANYBLOB="d00000000802110000000802110000ce0428da045050505050381fb4f615725ad001000000"], 0x21) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f00000003c0)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xa}, {0xff}, @device_a, @device_b, @device_a, {0x3, 0x2}, @device_b}, {0x9, 0x1, 0x2, 0x0, 0x40}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7e4f}, @device_a, @device_b, @random="387ade758beb", {0x4, 0xff8}}, {0x0, 0x1, 0x3, 0x1, 0x3}}}, @ver_80211n={0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_a, @device_a, 0x34, "27cfee1bab195327c10a03b9990691324ed4331fa1a4cbaac8b6835fbd4a1c55288d9a8d6076cef1733cc867bd57de655deb99db"}, {@device_b, @broadcast}, {@device_b, @device_a, 0xee, "cbb0bf3948ed54c6325fc37e3b96a1cd642ac22ae91863573afed679eab1f688dbf44a3eccbb347f8b6b182a1567f6c8567bd59af672126e464146399ea5762a9d972ccda5ee1c97779c3565c322681d24ca9a34ce2b5375f0b8c1f5f52182207fc19146c5b8fcd5ce3399710736c45dcdb3b410bbf668e32ff2353e997b073d0c04b40507f14a64c2c3ca497f8aa2ff7408e2025108c3131cee4cbc583585020166ac27b4541353351f1c75f480fa1379f2214e3f4184d779ec01a0828a79a6822f1966e1d3f569e20b9d160c72f0a29aef74a33ee339acf7037542f4e655315c9b0c9a4e0455e886e3b9b3f662"}]}, 0x18e) syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000180)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @broadcast, @initial, {0x2, 0x3f}}, {0x9, 0x0, 0x2, 0x0, 0xfc}}, {@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @initial, @random="7aaf69e352f9", {0x0, 0x20}}, {0x2, 0x0, 0x3, 0x1, 0x40}}}, @ver_80211n={0x0, 0xfb4, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x57, "ec9e756dc9aabaace9182356fc95e74ffe013265b0aab340e6e070a36bee912734e8b9e03efaee4d402d6b72abdaf607296d10dc75f9e2b490b45583ae5f9a593c32c37be6ec7644cdd24130479d5b05df688b2fc5399d"}, {@device_b, @broadcast, 0xa8, "2abf127920b86118882347b6134113ba70500b6e55aaed1b4c384a8ca6c65c117636e8eaa6d21021367237ae90730f7816517745cd8d13d5d8d7e0ace1b4322d44c09016fa952f2eece1ed59126b3b390bd995ea540183b8674f47f27ed47e61144bd041929e72e2af345759e50443b0a84c8cf41178480d6d05e8815bb78662d0195a156f16144b904be9221b32db5277c2957b67002f21c8e43eee082eacc3650d38eb502e0109"}, {@device_a, @device_b, 0x4b, "2af612f991b8b5eba99f16102f63a8ae126746bd562c54eb8dae328ae05c735b21ee16cc7eee4736fb49f03a7f7f208a36c2492e3a564ef0fbfed791b30af80100279bb6910e714d236d11"}, {@device_b, @broadcast}]}, 0x1c4) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xe}, {0x80}, @broadcast, @device_b, @device_a, {0x6, 0x40}, @broadcast}, {0x1, 0x0, 0x3, 0x0, 0x4}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0x8}}, {0x9, 0x1, 0x2, 0x1, 0x7f}}}, @a_msdu=[{@broadcast, @device_b, 0x75, "c8981c095155656a4effb431437bd7325296149e52b2779ac199fef3667d2e990030be033daf31587aabc9a7e008365cdb8258a5d31507809e41259be8821bc3c8aa74faf3d56a81d694ff1f4b97e7600d5f11b2c931de405b1e2a39c82220f597289debb50fadfc7cbc5ebd0acbf771f17036efe4"}]}, 0xbe) 04:58:31 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 62) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 2078.586635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2078.597697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2078.599419] FAULT_INJECTION: forcing a failure. [ 2078.599419] name failslab, interval 1, probability 0, space 0, times 0 [ 2078.600591] CPU: 0 PID: 11098 Comm: syz-executor.0 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2078.601170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2078.601735] Call Trace: [ 2078.601923] [ 2078.602090] dump_stack_lvl+0x8f/0xb7 [ 2078.602391] should_fail_ex.cold+0x5/0xa [ 2078.602690] ? __kernfs_new_node+0xd4/0x8c0 [ 2078.603003] should_failslab+0x9/0x20 [ 2078.603289] kmem_cache_alloc+0x5a/0x410 [ 2078.603596] ? perf_trace_preemptirq_template+0x272/0x410 [ 2078.603995] __kernfs_new_node+0xd4/0x8c0 [ 2078.604311] ? __pfx___kernfs_new_node+0x10/0x10 [ 2078.604679] ? mark_held_locks+0x9e/0xe0 [ 2078.604979] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2078.605362] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2078.605751] ? lockdep_hardirqs_on+0x7d/0x100 [ 2078.606084] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2078.606486] kernfs_new_node+0x97/0x120 [ 2078.606796] __kernfs_create_file+0x55/0x350 [ 2078.607124] sysfs_add_file_mode_ns+0x21c/0x440 [ 2078.607469] ? __pfx_dev_attr_store+0x10/0x10 [ 2078.607809] internal_create_group+0x322/0xb20 [ 2078.608152] ? __pfx_internal_create_group+0x10/0x10 [ 2078.608525] ? kernfs_add_one+0x17a/0x4f0 [ 2078.608832] ? kernfs_create_link+0x1bb/0x240 [ 2078.609160] internal_create_groups.part.0+0x90/0x140 [ 2078.609539] sysfs_create_groups+0x29/0x50 [ 2078.609744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2078.609849] device_add+0x711/0x1ec0 [ 2078.611259] ? __pfx_dev_set_name+0x10/0x10 [ 2078.611581] ? __pfx_device_add+0x10/0x10 [ 2078.611896] ? __init_waitqueue_head+0xca/0x150 [ 2078.612245] netdev_register_kobject+0x17e/0x3b0 [ 2078.612596] register_netdevice+0xd60/0x1530 [ 2078.612948] ? __pfx_register_netdevice+0x10/0x10 [ 2078.613317] ? dev_addr_mod+0x29e/0x350 [ 2078.613608] __tun_chr_ioctl+0x210b/0x3f80 [ 2078.613929] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2078.614275] ? __pfx___fget_files+0x10/0x10 [ 2078.614587] ? lock_acquire+0x32/0xc0 [ 2078.614888] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2078.615209] __x64_sys_ioctl+0x19e/0x210 [ 2078.615495] do_syscall_64+0x3f/0x90 [ 2078.615777] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2078.616151] RIP: 0033:0x7fcb82d36b19 [ 2078.616425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2078.617619] RSP: 002b:00007fcb802ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2078.618152] RAX: ffffffffffffffda RBX: 00007fcb82e49f60 RCX: 00007fcb82d36b19 [ 2078.618651] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2078.619146] RBP: 00007fcb802ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2078.619657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2078.620151] R13: 00007fffcd9858bf R14: 00007fcb802ac300 R15: 0000000000022000 [ 2078.620669] [ 2078.627553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2078.633181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2078.643611] FAULT_INJECTION: forcing a failure. [ 2078.643611] name failslab, interval 1, probability 0, space 0, times 0 [ 2078.646363] CPU: 1 PID: 11103 Comm: syz-executor.5 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2078.647407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2078.648446] Call Trace: [ 2078.648802] [ 2078.649117] dump_stack_lvl+0x8f/0xb7 [ 2078.649662] should_fail_ex.cold+0x5/0xa [ 2078.650207] ? __kernfs_new_node+0xd4/0x8c0 [ 2078.650798] should_failslab+0x9/0x20 [ 2078.651321] kmem_cache_alloc+0x5a/0x410 [ 2078.651880] __kernfs_new_node+0xd4/0x8c0 [ 2078.652447] ? lock_release+0x3b6/0x750 [ 2078.652980] ? __pfx___kernfs_new_node+0x10/0x10 [ 2078.653617] ? __pfx_lock_release+0x10/0x10 [ 2078.654190] ? lock_acquire+0x32/0xc0 [ 2078.654738] ? up_write+0x1b0/0x520 [ 2078.655256] kernfs_new_node+0x97/0x120 [ 2078.655823] __kernfs_create_file+0x55/0x350 [ 2078.656392] sysfs_add_file_mode_ns+0x21c/0x440 [ 2078.657043] ? __pfx_dev_attr_store+0x10/0x10 [ 2078.657672] internal_create_group+0x322/0xb20 [ 2078.658309] ? __pfx_internal_create_group+0x10/0x10 [ 2078.658994] ? kernfs_add_one+0x17a/0x4f0 [ 2078.659579] ? kernfs_create_link+0x1bb/0x240 [ 2078.660189] internal_create_groups.part.0+0x90/0x140 [ 2078.660890] sysfs_create_groups+0x29/0x50 [ 2078.661476] device_add+0x711/0x1ec0 [ 2078.661998] ? __pfx_dev_set_name+0x10/0x10 [ 2078.662583] ? __pfx_device_add+0x10/0x10 [ 2078.663164] netdev_register_kobject+0x17e/0x3b0 [ 2078.663823] register_netdevice+0xd60/0x1530 [ 2078.664434] ? __pfx_register_netdevice+0x10/0x10 [ 2078.665101] ? dev_addr_mod+0x29e/0x350 [ 2078.665644] __tun_chr_ioctl+0x210b/0x3f80 [ 2078.666192] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2078.666811] ? __pfx___fget_files+0x10/0x10 [ 2078.667386] ? lock_acquire+0x32/0xc0 [ 2078.667933] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2078.668543] __x64_sys_ioctl+0x19e/0x210 [ 2078.669102] do_syscall_64+0x3f/0x90 [ 2078.669622] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2078.670311] RIP: 0033:0x7f2e2b599b19 [ 2078.670819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2078.673158] RSP: 002b:00007f2e28b0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2078.674135] RAX: ffffffffffffffda RBX: 00007f2e2b6acf60 RCX: 00007f2e2b599b19 [ 2078.675055] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2078.675975] RBP: 00007f2e28b0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2078.676897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2078.677813] R13: 00007ffde0b4b8af R14: 00007f2e28b0f300 R15: 0000000000022000 [ 2078.678767] [ 2078.693092] Invalid ELF header magic: != ELF 04:58:31 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) [ 2078.723364] FAULT_INJECTION: forcing a failure. [ 2078.723364] name failslab, interval 1, probability 0, space 0, times 0 [ 2078.724334] CPU: 0 PID: 11105 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2078.724923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2078.725491] Call Trace: [ 2078.725678] [ 2078.725849] dump_stack_lvl+0x8f/0xb7 [ 2078.726147] should_fail_ex.cold+0x5/0xa [ 2078.726447] ? __kernfs_new_node+0xd4/0x8c0 [ 2078.726779] should_failslab+0x9/0x20 [ 2078.727067] kmem_cache_alloc+0x5a/0x410 [ 2078.727377] __kernfs_new_node+0xd4/0x8c0 [ 2078.727695] ? lock_release+0x3b6/0x750 [ 2078.727993] ? __pfx___kernfs_new_node+0x10/0x10 [ 2078.728344] ? __pfx_lock_release+0x10/0x10 [ 2078.728651] ? lock_acquire+0x32/0xc0 [ 2078.728954] ? up_write+0x1b0/0x520 [ 2078.729239] kernfs_new_node+0x97/0x120 [ 2078.729544] __kernfs_create_file+0x55/0x350 [ 2078.729874] sysfs_add_file_mode_ns+0x21c/0x440 [ 2078.730217] ? __pfx_dev_attr_store+0x10/0x10 [ 2078.730559] internal_create_group+0x322/0xb20 [ 2078.730905] ? __pfx_internal_create_group+0x10/0x10 [ 2078.731276] ? kernfs_add_one+0x17a/0x4f0 [ 2078.731594] ? kernfs_create_link+0x1bb/0x240 [ 2078.731910] internal_create_groups.part.0+0x90/0x140 [ 2078.732290] sysfs_create_groups+0x29/0x50 [ 2078.732587] device_add+0x711/0x1ec0 [ 2078.732888] ? __pfx_dev_set_name+0x10/0x10 [ 2078.733206] ? __pfx_device_add+0x10/0x10 [ 2078.733517] ? __init_waitqueue_head+0xca/0x150 [ 2078.733881] netdev_register_kobject+0x17e/0x3b0 [ 2078.734242] register_netdevice+0xd60/0x1530 [ 2078.734572] ? __pfx_register_netdevice+0x10/0x10 [ 2078.734933] ? dev_addr_mod+0x29e/0x350 [ 2078.735235] __tun_chr_ioctl+0x210b/0x3f80 [ 2078.735537] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2078.735877] ? __pfx___fget_files+0x10/0x10 [ 2078.736198] ? lock_acquire+0x32/0xc0 [ 2078.736490] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2078.736830] __x64_sys_ioctl+0x19e/0x210 [ 2078.737129] do_syscall_64+0x3f/0x90 [ 2078.737413] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2078.737787] RIP: 0033:0x7ff461a5bb19 [ 2078.738055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2078.739311] RSP: 002b:00007ff45efd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2078.739850] RAX: ffffffffffffffda RBX: 00007ff461b6ef60 RCX: 00007ff461a5bb19 [ 2078.740351] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2078.740867] RBP: 00007ff45efd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2078.741367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2078.741868] R13: 00007ffd52eb9b7f R14: 00007ff45efd1300 R15: 0000000000022000 [ 2078.742384] 04:58:32 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 75) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:32 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 79) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:32 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8912, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 04:58:32 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f0000000040)) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010101, r1}, 0xc) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x82, 0x1, @private0, @remote, 0x8000, 0x7800, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 04:58:32 executing program 6: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 63) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x0, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:32 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 77) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 2078.919569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:58:32 executing program 4: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000000100)=ANY=[@ANYBLOB="d00000000802110000000802110000ce0428da045050505050381fb4f615725ad001000000"], 0x21) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f00000003c0)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xa}, {0xff}, @device_a, @device_b, @device_a, {0x3, 0x2}, @device_b}, {0x9, 0x1, 0x2, 0x0, 0x40}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7e4f}, @device_a, @device_b, @random="387ade758beb", {0x4, 0xff8}}, {0x0, 0x1, 0x3, 0x1, 0x3}}}, @ver_80211n={0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_a, @device_a, 0x34, "27cfee1bab195327c10a03b9990691324ed4331fa1a4cbaac8b6835fbd4a1c55288d9a8d6076cef1733cc867bd57de655deb99db"}, {@device_b, @broadcast}, {@device_b, @device_a, 0xee, "cbb0bf3948ed54c6325fc37e3b96a1cd642ac22ae91863573afed679eab1f688dbf44a3eccbb347f8b6b182a1567f6c8567bd59af672126e464146399ea5762a9d972ccda5ee1c97779c3565c322681d24ca9a34ce2b5375f0b8c1f5f52182207fc19146c5b8fcd5ce3399710736c45dcdb3b410bbf668e32ff2353e997b073d0c04b40507f14a64c2c3ca497f8aa2ff7408e2025108c3131cee4cbc583585020166ac27b4541353351f1c75f480fa1379f2214e3f4184d779ec01a0828a79a6822f1966e1d3f569e20b9d160c72f0a29aef74a33ee339acf7037542f4e655315c9b0c9a4e0455e886e3b9b3f662"}]}, 0x18e) syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000180)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @broadcast, @initial, {0x2, 0x3f}}, {0x9, 0x0, 0x2, 0x0, 0xfc}}, {@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @initial, @random="7aaf69e352f9", {0x0, 0x20}}, {0x2, 0x0, 0x3, 0x1, 0x40}}}, @ver_80211n={0x0, 0xfb4, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x57, "ec9e756dc9aabaace9182356fc95e74ffe013265b0aab340e6e070a36bee912734e8b9e03efaee4d402d6b72abdaf607296d10dc75f9e2b490b45583ae5f9a593c32c37be6ec7644cdd24130479d5b05df688b2fc5399d"}, {@device_b, @broadcast, 0xa8, "2abf127920b86118882347b6134113ba70500b6e55aaed1b4c384a8ca6c65c117636e8eaa6d21021367237ae90730f7816517745cd8d13d5d8d7e0ace1b4322d44c09016fa952f2eece1ed59126b3b390bd995ea540183b8674f47f27ed47e61144bd041929e72e2af345759e50443b0a84c8cf41178480d6d05e8815bb78662d0195a156f16144b904be9221b32db5277c2957b67002f21c8e43eee082eacc3650d38eb502e0109"}, {@device_a, @device_b, 0x4b, "2af612f991b8b5eba99f16102f63a8ae126746bd562c54eb8dae328ae05c735b21ee16cc7eee4736fb49f03a7f7f208a36c2492e3a564ef0fbfed791b30af80100279bb6910e714d236d11"}, {@device_b, @broadcast}]}, 0x1c4) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xe}, {0x80}, @broadcast, @device_b, @device_a, {0x6, 0x40}, @broadcast}, {0x1, 0x0, 0x3, 0x0, 0x4}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0x8}}, {0x9, 0x1, 0x2, 0x1, 0x7f}}}, @a_msdu=[{@broadcast, @device_b, 0x75, "c8981c095155656a4effb431437bd7325296149e52b2779ac199fef3667d2e990030be033daf31587aabc9a7e008365cdb8258a5d31507809e41259be8821bc3c8aa74faf3d56a81d694ff1f4b97e7600d5f11b2c931de405b1e2a39c82220f597289debb50fadfc7cbc5ebd0acbf771f17036efe4"}]}, 0xbe) 04:58:32 executing program 3: syz_80211_inject_frame(&(0x7f0000003140), &(0x7f0000000000)=@mgmt_frame=@action={@wo_ht={{}, {}, @device_a, @device_b}, @tdls_setup_cfm={0xc, 0x2, {0x52, 0x4}}}, 0x1d) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x28a}, @device_b, @device_b, @initial, {0xb, 0x80}}, @ver_80211n={0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x1}}, @addba_resp={0x3, 0x1, {0x40, 0x49, {0x1, 0x1, 0x9, 0x8}, 0x2}}}, 0x25) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end={{}, {0x36bc}, @device_b, @random="9a0d2401665f"}, 0x10) [ 2078.993399] Invalid ELF header magic: != ELF [ 2079.016487] Invalid ELF header magic: != ELF 04:58:32 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 76) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) [ 2079.038414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2079.051573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:58:32 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8914, &(0x7f0000000380)={@private2, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) [ 2079.062484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2079.100378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2079.103025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:58:32 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 80) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) 04:58:32 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xf5, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x80, 0x6}}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x1, 0x82, 0x1, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7800, 0xff}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') [ 2079.195560] FAULT_INJECTION: forcing a failure. [ 2079.195560] name failslab, interval 1, probability 0, space 0, times 0 [ 2079.198302] CPU: 1 PID: 11139 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 2079.199377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2079.200409] Call Trace: [ 2079.200783] [ 2079.201096] dump_stack_lvl+0x8f/0xb7 [ 2079.201631] should_fail_ex.cold+0x5/0xa [ 2079.202182] ? __kernfs_new_node+0xd4/0x8c0 [ 2079.202763] should_failslab+0x9/0x20 [ 2079.203269] kmem_cache_alloc+0x5a/0x410 [ 2079.203826] __kernfs_new_node+0xd4/0x8c0 [ 2079.204390] ? lock_release+0x3b6/0x750 [ 2079.204955] ? __pfx___kernfs_new_node+0x10/0x10 [ 2079.205597] ? __pfx_lock_release+0x10/0x10 [ 2079.206175] ? lock_acquire+0x32/0xc0 [ 2079.206712] ? up_write+0x1b0/0x520 [ 2079.207242] kernfs_new_node+0x97/0x120 [ 2079.207789] __kernfs_create_file+0x55/0x350 [ 2079.208398] sysfs_add_file_mode_ns+0x21c/0x440 [ 2079.209031] ? __pfx_dev_attr_store+0x10/0x10 [ 2079.209659] internal_create_group+0x322/0xb20 [ 2079.210285] ? __pfx_internal_create_group+0x10/0x10 [ 2079.210963] ? kernfs_add_one+0x17a/0x4f0 [ 2079.211535] ? kernfs_create_link+0x1bb/0x240 [ 2079.212154] internal_create_groups.part.0+0x90/0x140 [ 2079.212862] sysfs_create_groups+0x29/0x50 [ 2079.213436] device_add+0x711/0x1ec0 [ 2079.213950] ? __pfx_dev_set_name+0x10/0x10 [ 2079.214540] ? __pfx_device_add+0x10/0x10 [ 2079.215100] ? __init_waitqueue_head+0xca/0x150 [ 2079.215755] netdev_register_kobject+0x17e/0x3b0 [ 2079.216400] register_netdevice+0xd60/0x1530 [ 2079.217029] ? __pfx_register_netdevice+0x10/0x10 [ 2079.217677] ? dev_addr_mod+0x29e/0x350 [ 2079.218227] __tun_chr_ioctl+0x210b/0x3f80 [ 2079.218801] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2079.219432] ? __pfx___fget_files+0x10/0x10 [ 2079.220001] ? lock_acquire+0x32/0xc0 [ 2079.220547] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2079.221152] __x64_sys_ioctl+0x19e/0x210 [ 2079.221717] do_syscall_64+0x3f/0x90 [ 2079.222231] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2079.222923] RIP: 0033:0x7f59fcc15b19 [ 2079.223414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2079.225728] RSP: 002b:00007f59fa18b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2079.226702] RAX: ffffffffffffffda RBX: 00007f59fcd28f60 RCX: 00007f59fcc15b19 [ 2079.227614] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2079.228517] RBP: 00007f59fa18b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2079.229413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2079.230317] R13: 00007fffcf2eaccf R14: 00007f59fa18b300 R15: 0000000000022000 [ 2079.231255] [ 2079.333636] Invalid ELF header magic: != ELF [ 2079.437340] Invalid ELF header magic: != ELF [ 2083.869834] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 2088.285795] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 2092.701794] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 2095.088416] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2095.092891] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2095.094417] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2095.098601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2095.101025] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2095.102175] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2097.117813] Bluetooth: hci3: command 0x0409 tx timeout [ 2099.165797] Bluetooth: hci3: command 0x041b tx timeout [ 2101.213809] Bluetooth: hci3: command 0x040f tx timeout [ 2103.261733] Bluetooth: hci3: command 0x0419 tx timeout [ 2116.261815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2116.262700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2116.265253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2116.320442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2116.321208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2116.322750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2116.669983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2121.181785] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 2123.619180] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2123.629455] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2123.631175] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2123.635186] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2123.638491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2123.640021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2125.661977] Bluetooth: hci3: command 0x0409 tx timeout [ 2127.710226] Bluetooth: hci3: command 0x041b tx timeout [ 2129.758168] Bluetooth: hci3: command 0x040f tx timeout [ 2131.807142] Bluetooth: hci3: command 0x0419 tx timeout [ 2145.447847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2145.448986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2145.451656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2145.500331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2145.501808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2145.505382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2145.956822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2148.451227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2148.460069] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2148.461435] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2148.464716] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2148.467009] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2148.472146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2150.494036] Bluetooth: hci3: command 0x0409 tx timeout [ 2152.541764] Bluetooth: hci3: command 0x041b tx timeout [ 2154.589755] Bluetooth: hci3: command 0x040f tx timeout [ 2156.637765] Bluetooth: hci3: command 0x0419 tx timeout [ 2170.042972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2170.044247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2170.047351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2170.086876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2170.087996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2170.090149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2170.528349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2173.103289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2173.106202] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2173.108647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2173.112305] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2173.114632] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2173.116074] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2175.133793] Bluetooth: hci3: command 0x0409 tx timeout [ 2177.181863] Bluetooth: hci3: command 0x041b tx timeout [ 2179.229870] Bluetooth: hci3: command 0x040f tx timeout [ 2181.277775] Bluetooth: hci3: command 0x0419 tx timeout [ 2194.830055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2194.831504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.833979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2194.872061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2194.873293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.875837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2195.247453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2197.741718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2197.748879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2197.754003] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2197.761369] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2197.764550] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2197.766810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2199.837895] Bluetooth: hci3: command 0x0409 tx timeout [ 2201.885738] Bluetooth: hci3: command 0x041b tx timeout [ 2203.933739] Bluetooth: hci3: command 0x040f tx timeout [ 2205.981835] Bluetooth: hci3: command 0x0419 tx timeout [ 2218.929071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2218.930394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2218.934036] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2218.995478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2218.996644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2218.999518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2219.416003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2223.966063] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 2228.381887] Bluetooth: hci3: Opcode 0x c03 failed: -110 2022/12/27 05:01:01 executor 3 failed 11 times: executor 3: exit status 67 SYZFAIL: wrong response packet (errno 2: No such file or directory) loop exited with status 67 VM DIAGNOSIS: 05:01:01 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800e64f980 RCX=ffffea0000000000 RDX=ffff88800844f780 RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88806ce09e48 RSP=ffff88806ce09e10 R8 =0000000000000000 R9 =ffffffff85d09417 R10=fffffbfff0ba1282 R11=0000000000000001 R12=ffffea00003993c0 R13=ffffffff8134d97e R14=0000000000000000 R15=ffff88800844f780 RIP=ffffffff817c9567 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0a7d08f000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0a7d08d000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd58d77cfb8 CR3=000000000c508000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=636578650a3a73656d69742031312064 XMM02=6174732074697865203a3320726f7475 XMM03=203a4c4941465a59530a373620737574 XMM04=702065736e6f7073657220676e6f7277 XMM05=3a32206f6e72726528200a74656b6361 XMM06=726f20656c69662068637573206f4e20 XMM07=706f6f6c0a2979726f74636572696420 XMM08=3a3320726f7475636578650a3a73656d XMM09=0a373620737574617473207469786520 XMM10=7220676e6f7277203a4c4941465a5953 XMM11=200a74656b6361702065736e6f707365 XMM12=637573206f4e203a32206f6e72726528 XMM13=74636572696420726f20656c69662068 XMM14=64657469786520706f6f6c0a2979726f XMM15=0a373620737574617473206874697720 info registers vcpu 1 RAX=fffffbfff0ec6519 RBX=fffffbfff0ec6519 RCX=ffffffff812b831a RDX=fffffbfff0ec6519 RSI=0000000000000008 RDI=ffffffff876328c0 RBP=fffffbfff0ec6518 RSP=ffff88800f7c7428 R8 =0000000000000000 R9 =ffffffff876328c7 R10=fffffbfff0ec6518 R11=0000000000000001 R12=ffff888014593580 R13=ffff888014593f30 R14=ffff888014593ee0 R15=0000000000000000 RIP=ffffffff817cead4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe24e0c83000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe24e0c81000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd58d6ac870 CR3=0000000017c82000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004150f92400000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000