7e592478db98a0723f69b411d65c57fafabe4640290b2074411e4c1a099e1d9d33a37afad89ef9bf549d4c580f4fee975b3d936f48c6d85fcedd5cf0c9583999788635d064ca6997fc2a879ca79914e25f91a300a26da7a0b93688084dd3cae51be02868665ca12afe00e0f2a0c639671c701cee5bf7362afc36c339e1c20979b4c22f4265ceaca69d01b43888687b08775ef315435e1b1ec594ac211857f81aa81c067a5aa81d1a5e262e4b7dbe0c20ee05db29ac18898aa9fe3d1ee22ef5e1fb2e5c175f59b31b558868d3edf8af6c72066101526791399e1f8b340a814c65cb2b63b2b18ff4fdf9759bcf2064e086a213eaaec67beaee674d7271561c115a36a432e6f05e3a4039e45688e06144a468fb4a3591c3468fd33185543110d662e1f31a515b5b734af7f5a959b7ccefd8c24da2e819329b4b0a9719d90b185c5182d395b730d42852334faadaa735dd764234dcd6e654a583c2e022429577384573a221741aabf383c0c86bc681d465739ec338de3440060e6d7cb7ffc8505a390e2b7207e46634469b86304cd9b14af8155b2f2020a0806cbf27c70bde62b991f1bffbfdc6fe3c41aac91b5433a1764367d5dcf1cfa15e14bccc788e7b499d8afb27ceae69fa0629f256d0a40f35b17dd3aa1e893d44c24ffc2bf7f9d290317d7fb983200312b9e4520703182743058c7f56560be1f38f9fdd9bdb4a479dbfc8188ac97e336ab7f9a80c269fc5a519c2fee37eeea363803119558f9f9087ee34dbb295acb5b61be97d165370cad088d4bc6d2ac2475da33988799527115899fc8e3f8c7f8058c2d66c4c1c38a037ba3bb0baf68789f55bacc6b8f57f49048a5bcf66adb86f86c6e5ed76f2f99fed713203b9e24b803b2035a10de375659e72981618bd117d2e005bacb9d5c64eb7e7b677a19bbacdbdc60223f876faa4134ac37f4a2c93ea8a377c9646c46fa5f245192394bf9d6b6e9ff57832d26927fd869223903e424e70cc5c149dbf1955b4b1bafb17162aa69f250260b68fb26719af663f03ed8357eaea5f50b06380624d98a9db72cfc77e1f317f79fe281c6f205eada985d0b1b3ff0deec60ce7590953beaecdf4b37597bdf561f8e52a09cdba8615f05afbde47577ed5ba82287d983ff4613a3db3e71447efba09094b5df1173654ff201fdb523b5b9caf2448b68cf2de3b1079ed52fb6b462a24dfbd7254b292f1dfe3a0e7e5c43695911c41d5e08da8f356199b3e7bb5169a1772cb2309754f52251d0b3ea7f386172b4a669a42557734e6b901d744187a0af2c593e0deab096a890c58cb8ef50ff951ced21e2f82898cf75b2113e7900ef95db9895ae6dd37b8bb4409da495ef160bee4f9543d8d7124555c6f7283557e39d8cc9c886aafedbfe56d1efa90dae6c18991026863b111c4c26f230e23d756aa8618bc41e31cdf8a68d76f95c5ba61db4894525cbde664c68385779f521114caba"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002f80)={'vcan0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000002fc0)) syz_open_dev$tty1(0xc, 0x4, 0x2) 09:46:28 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 09:46:28 executing program 1: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x6) 09:46:28 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e00)) 09:46:28 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "745103659c5f06399b78e79df5f4b006e86e5d964fe98810fc0e078d99e07f5b86c73c9b61fabc8f42991cd3e8e5013210f4a0fe7b52ce8c225bc5833553a33c7d972b4b9ae7d0f4fe6bc6eb7301f5c55acc4a050918c441bc350115989d1c814c1d1e5c68a148b06caf80578cb8e8ae3f44aad8a6e3035c121100251a244e40d300a1891edc7d864edb3f58f9699bcac754290a5e5f0c85347f9d022655110b7faf5debedb63ccfe7b73dfe48291c0588b2263cd734088b847e13d353d10c55f6a0734b3c672f121cd506fde63835d84c395e5a362a6c9e963da032e1b20ae7ce4a941f6f01404e9553077169606fc43a91a3af6bdee8d6732261049d328f792010d46654c493b43698c6e2d565c3e369f5ed9fe98284a3667e53a2967196333dd66a4784c2887c40d9d47164ace55125b9cb04a6ce530d7e8d894be9ce0f42ebb86daf6bcf045b6d4caf593066ed17bc3524dccffa6a3d81f57a6a5ac96db8a1f948e151f395266a0b1f51e488897d95ce566604da658342cb4762247cb8dc92792df158edf0a453c01d1e11ab84e6d6e6b20e7ab0597a354e0d999edbaf0c3c9804a102be8be0a9a3e8a07e94c87e31efe7f3aacb741ccbe34babd87b505c2aaa91aa57b5a1e8f4b148fc8178a3b69b603337075e534d447a9bf1c7ed9d8963c1b9945054773cffcc2ec88622a4679a5df2d9b1202f553b0764a4bd0e9bb3710eaba3a950c6859b46e28f3831a1dd7bb456ea6ca28609c4c122b3c32741953a3316bc81bd2b4994e136aff93916ef9e04d07380175d09a5517030c373e6cd92ff7473785683e86f090b0ee89df884a6fcd94e2c779fddaf50dde4032cce6268c09ac03bd63305b569936f5e0acf5626fe8f97cbd90391357199b93263e41045d16ab760c06aa81c5f9e2f4826afc9d03378a944267a13ff18435371b4e8027d01324df64ba457e6fc39819a93a009d8879e0ebac7ff4716abb9813d9a15159b504b4f95f27ce0cb4b3ad763c02990a0d482378d5a11b4faf5d76221d0b877b63dea521385e4a22983d3955b62b865de8dcc17f35cd9abbc9dce551d972d2417f748df90edf0170d7805adcdd9142465984b83d8b1dc4a03af1936604587987deeff92519cb4a2dfcbbe08ecf8008ecf988d4ce6ed5cc187341317610321e43a32234074c066f25cadc2da913238215e36aee052612cf60ad10ea941771619957b622d13bf2cd6757533b24ac610375756608443c0799a83080c29e0f53e0c2c9146145a5356446b0ae3fe6517b509c910d51186b4cee936a6aa88fd58689b813ee2e3784981e860af7174b95fcba538a1de01486088264d6067944a084c42032068f0014fee6a5336fd9d09c718aae4f1b64f2afb76bfac12ae5f541c9dbc0acec5db257eff65741813e80ea6b68f5d694c64036d001af0361d71700b6ff4fee22fced67e3d824fa53d4ce9e6155e13feebf3ab0409bbfa5923de291e363ecef642a3397999d0fc4cab9bae04fb22f9b12507f0a5e9f91d7bbd85f68a82644f882ddda15e2a5b8db5fd9a3a066bbc422c0cd560a416a1f9c15180e82de5aa3009da573018e7c83ded6047dbe25592cdeb65cfcf99c9f0979829f7da8b5b4b6a6e12e1426e090e7bb9b80563f7e5dc10fd04c62bb75cfb95db3aa6714be447083e844e67099c3ef341b59225f6dc0e975b8c0f5b182631393d9374a187c13465d36219d77b653e90e0cfc59f195e734193b834c905e123dcedef2f00edd85e7c4ea9171094a3921e4a41f68504e66def83780901a092ff7eb86b859df6a833918fb742b0a7c5e6162ab7b7051015477b9df1e996d5c6532e09267ae7fffbb1af5e4d81e528e5d5073430879e52afd712512ed0fd4b2e94c6d3afcc6b677bb25fe304398cd547127df01018e8aeef60f21ba0203a7a0ae6f95c0b1b32672a82b48b0c9cc251bb241afe6e1f59fc524b427b8db2080d62eb775723c18c627ad380cd7eb76b843ca9bb55a115efdb192be4f8bbf9cf9e3090438fd11a0985db1f0e343d788791a9b9a858b5ccd9aa6d427eb71ed6b09300a60f01eaf60a3c0f718afa88a0cf87ef9ca76df0dd3bb1bf198ac557a5d95116e9479c0ab0bbdd258b0487a712881f4a4c2dbfeb5546b6f7a26e515f2fcbde7dda39c9d23f4eed9f68acd266f1538388f2aef02d25e4689be1d56f91ffa238ce12467dbe02c051531868e48df3398440198a2ba72f4200aae0a265ae777c5be791e7b59385a43b0fbaa5d82c544ffcb0a3acd9bcbd7221f7d91bab4807a78cef37499a62802457a3ee4321ea769f77fd5a8b36a8f50147c63d819f7eb8a1cc0cb57d3edd973e903b2042851ec62ca2de5f3723f2d2c587847384a6d46e5c557e592478db98a0723f69b411d65c57fafabe4640290b2074411e4c1a099e1d9d33a37afad89ef9bf549d4c580f4fee975b3d936f48c6d85fcedd5cf0c9583999788635d064ca6997fc2a879ca79914e25f91a300a26da7a0b93688084dd3cae51be02868665ca12afe00e0f2a0c639671c701cee5bf7362afc36c339e1c20979b4c22f4265ceaca69d01b43888687b08775ef315435e1b1ec594ac211857f81aa81c067a5aa81d1a5e262e4b7dbe0c20ee05db29ac18898aa9fe3d1ee22ef5e1fb2e5c175f59b31b558868d3edf8af6c72066101526791399e1f8b340a814c65cb2b63b2b18ff4fdf9759bcf2064e086a213eaaec67beaee674d7271561c115a36a432e6f05e3a4039e45688e06144a468fb4a3591c3468fd33185543110d662e1f31a515b5b734af7f5a959b7ccefd8c24da2e819329b4b0a9719d90b185c5182d395b730d42852334faadaa735dd764234dcd6e654a583c2e022429577384573a221741aabf383c0c86bc681d465739ec338de3440060e6d7cb7ffc8505a390e2b7207e46634469b86304cd9b14af8155b2f2020a0806cbf27c70bde62b991f1bffbfdc6fe3c41aac91b5433a1764367d5dcf1cfa15e14bccc788e7b499d8afb27ceae69fa0629f256d0a40f35b17dd3aa1e893d44c24ffc2bf7f9d290317d7fb983200312b9e4520703182743058c7f56560be1f38f9fdd9bdb4a479dbfc8188ac97e336ab7f9a80c269fc5a519c2fee37eeea363803119558f9f9087ee34dbb295acb5b61be97d165370cad088d4bc6d2ac2475da33988799527115899fc8e3f8c7f8058c2d66c4c1c38a037ba3bb0baf68789f55bacc6b8f57f49048a5bcf66adb86f86c6e5ed76f2f99fed713203b9e24b803b2035a10de375659e72981618bd117d2e005bacb9d5c64eb7e7b677a19bbacdbdc60223f876faa4134ac37f4a2c93ea8a377c9646c46fa5f245192394bf9d6b6e9ff57832d26927fd869223903e424e70cc5c149dbf1955b4b1bafb17162aa69f250260b68fb26719af663f03ed8357eaea5f50b06380624d98a9db72cfc77e1f317f79fe281c6f205eada985d0b1b3ff0deec60ce7590953beaecdf4b37597bdf561f8e52a09cdba8615f05afbde47577ed5ba82287d983ff4613a3db3e71447efba09094b5df1173654ff201fdb523b5b9caf2448b68cf2de3b1079ed52fb6b462a24dfbd7254b292f1dfe3a0e7e5c43695911c41d5e08da8f356199b3e7bb5169a1772cb2309754f52251d0b3ea7f386172b4a669a42557734e6b901d744187a0af2c593e0deab096a890c58cb8ef50ff951ced21e2f82898cf75b2113e7900ef95db9895ae6dd37b8bb4409da495ef160bee4f9543d8d7124555c6f7283557e39d8cc9c886aafedbfe56d1efa90dae6c18991026863b111c4c26f230e23d756aa8618bc41e31cdf8a68d76f95c5ba61db4894525cbde664c68385779f521114caba"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) 09:46:28 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002f80)={'vcan0\x00'}) 09:46:28 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 09:46:28 executing program 1: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "a183b02af2ae93eb40516565618128ebb757dd09ba008ba77cad74910fef020e985a54edf14a8761342835031f2775da0365b0d90e1bfd7a5a44788856c1c8c50f1f6d28677a58ef175360d9d1ecc748bc96a0479e477bf153ede5785ead923a220d69f72c6432df49a77398e5e985dcd72b4da540e929929400a44c3b7a08df00dcd0a14420e377e312fa88eb794e8edeb2145dd561534c3e9e8365ebd03c199cc93bb0d3149e54105130fcc259d4da99e451a89dfcc8d4ad2be7492ddf2b328ef7e8dc32d977fe6bd217617f61c433ec763113c6158253e5ab8bc79dc56779a7f78033f2f31d2daaccad34728fe39046b1488c6d3b73bc9e97aa35587ddd377d9b82beded43d9bb369e50c413eebb3051b8ea2f0868f729649bcef71ba4cb6e0c7502fd78c1fbb2905396ced3102ea9ea654b2a67aa56e3e6ce1f1482901be39f5c56fbd076f3b07cb68cee4c5344b1b8d5846f50302c29e05134647efe75823a35729d8a1afdea265b2a7e782bbb61278b7ef10e9a515fb2832db6f557e4a97380795399245e678f8c628d2b2195bf014a78be0df83861ec1ccd0258e96bf2cc69acc255f9c92cb77f94374cf085e2342443c624f0fad1ecdc44a"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) 09:46:28 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) 09:46:28 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 09:46:28 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x6) 09:46:28 executing program 1: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) 09:46:28 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "745103659c5f06399b78e79df5f4b006e86e5d964fe98810fc0e078d99e07f5b86c73c9b61fabc8f42991cd3e8e5013210f4a0fe7b52ce8c225bc5833553a33c7d972b4b9ae7d0f4fe6bc6eb7301f5c55acc4a050918c441bc350115989d1c814c1d1e5c68a148b06caf80578cb8e8ae3f44aad8a6e3035c121100251a244e40d300a1891edc7d864edb3f58f9699bcac754290a5e5f0c85347f9d022655110b7faf5debedb63ccfe7b73dfe48291c0588b2263cd734088b847e13d353d10c55f6a0734b3c672f121cd506fde63835d84c395e5a362a6c9e963da032e1b20ae7ce4a941f6f01404e9553077169606fc43a91a3af6bdee8d6732261049d328f792010d46654c493b43698c6e2d565c3e369f5ed9fe98284a3667e53a2967196333dd66a4784c2887c40d9d47164ace55125b9cb04a6ce530d7e8d894be9ce0f42ebb86daf6bcf045b6d4caf593066ed17bc3524dccffa6a3d81f57a6a5ac96db8a1f948e151f395266a0b1f51e488897d95ce566604da658342cb4762247cb8dc92792df158edf0a453c01d1e11ab84e6d6e6b20e7ab0597a354e0d999edbaf0c3c9804a102be8be0a9a3e8a07e94c87e31efe7f3aacb741ccbe34babd87b505c2aaa91aa57b5a1e8f4b148fc8178a3b69b603337075e534d447a9bf1c7ed9d8963c1b9945054773cffcc2ec88622a4679a5df2d9b1202f553b0764a4bd0e9bb3710eaba3a950c6859b46e28f3831a1dd7bb456ea6ca28609c4c122b3c32741953a3316bc81bd2b4994e136aff93916ef9e04d07380175d09a5517030c373e6cd92ff7473785683e86f090b0ee89df884a6fcd94e2c779fddaf50dde4032cce6268c09ac03bd63305b569936f5e0acf5626fe8f97cbd90391357199b93263e41045d16ab760c06aa81c5f9e2f4826afc9d03378a944267a13ff18435371b4e8027d01324df64ba457e6fc39819a93a009d8879e0ebac7ff4716abb9813d9a15159b504b4f95f27ce0cb4b3ad763c02990a0d482378d5a11b4faf5d76221d0b877b63dea521385e4a22983d3955b62b865de8dcc17f35cd9abbc9dce551d972d2417f748df90edf0170d7805adcdd9142465984b83d8b1dc4a03af1936604587987deeff92519cb4a2dfcbbe08ecf8008ecf988d4ce6ed5cc187341317610321e43a32234074c066f25cadc2da913238215e36aee052612cf60ad10ea941771619957b622d13bf2cd6757533b24ac610375756608443c0799a83080c29e0f53e0c2c9146145a5356446b0ae3fe6517b509c910d51186b4cee936a6aa88fd58689b813ee2e3784981e860af7174b95fcba538a1de01486088264d6067944a084c42032068f0014fee6a5336fd9d09c718aae4f1b64f2afb76bfac12ae5f541c9dbc0acec5db257eff65741813e80ea6b68f5d694c64036d001af0361d71700b6ff4fee22fced67e3d824fa53d4ce9e6155e13feebf3ab0409bbfa5923de291e363ecef642a3397999d0fc4cab9bae04fb22f9b12507f0a5e9f91d7bbd85f68a82644f882ddda15e2a5b8db5fd9a3a066bbc422c0cd560a416a1f9c15180e82de5aa3009da573018e7c83ded6047dbe25592cdeb65cfcf99c9f0979829f7da8b5b4b6a6e12e1426e090e7bb9b80563f7e5dc10fd04c62bb75cfb95db3aa6714be447083e844e67099c3ef341b59225f6dc0e975b8c0f5b182631393d9374a187c13465d36219d77b653e90e0cfc59f195e734193b834c905e123dcedef2f00edd85e7c4ea9171094a3921e4a41f68504e66def83780901a092ff7eb86b859df6a833918fb742b0a7c5e6162ab7b7051015477b9df1e996d5c6532e09267ae7fffbb1af5e4d81e528e5d5073430879e52afd712512ed0fd4b2e94c6d3afcc6b677bb25fe304398cd547127df01018e8aeef60f21ba0203a7a0ae6f95c0b1b32672a82b48b0c9cc251bb241afe6e1f59fc524b427b8db2080d62eb775723c18c627ad380cd7eb76b843ca9bb55a115efdb192be4f8bbf9cf9e3090438fd11a0985db1f0e343d788791a9b9a858b5ccd9aa6d427eb71ed6b09300a60f01eaf60a3c0f718afa88a0cf87ef9ca76df0dd3bb1bf198ac557a5d95116e9479c0ab0bbdd258b0487a712881f4a4c2dbfeb5546b6f7a26e515f2fcbde7dda39c9d23f4eed9f68acd266f1538388f2aef02d25e4689be1d56f91ffa238ce12467dbe02c051531868e48df3398440198a2ba72f4200aae0a265ae777c5be791e7b59385a43b0fbaa5d82c544ffcb0a3acd9bcbd7221f7d91bab4807a78cef37499a62802457a3ee4321ea769f77fd5a8b36a8f50147c63d819f7eb8a1cc0cb57d3edd973e903b2042851ec62ca2de5f3723f2d2c587847384a6d46e5c557e592478db98a0723f69b411d65c57fafabe4640290b2074411e4c1a099e1d9d33a37afad89ef9bf549d4c580f4fee975b3d936f48c6d85fcedd5cf0c9583999788635d064ca6997fc2a879ca79914e25f91a300a26da7a0b93688084dd3cae51be02868665ca12afe00e0f2a0c639671c701cee5bf7362afc36c339e1c20979b4c22f4265ceaca69d01b43888687b08775ef315435e1b1ec594ac211857f81aa81c067a5aa81d1a5e262e4b7dbe0c20ee05db29ac18898aa9fe3d1ee22ef5e1fb2e5c175f59b31b558868d3edf8af6c72066101526791399e1f8b340a814c65cb2b63b2b18ff4fdf9759bcf2064e086a213eaaec67beaee674d7271561c115a36a432e6f05e3a4039e45688e06144a468fb4a3591c3468fd33185543110d662e1f31a515b5b734af7f5a959b7ccefd8c24da2e819329b4b0a9719d90b185c5182d395b730d42852334faadaa735dd764234dcd6e654a583c2e022429577384573a221741aabf383c0c86bc681d465739ec338de3440060e6d7cb7ffc8505a390e2b7207e46634469b86304cd9b14af8155b2f2020a0806cbf27c70bde62b991f1bffbfdc6fe3c41aac91b5433a1764367d5dcf1cfa15e14bccc788e7b499d8afb27ceae69fa0629f256d0a40f35b17dd3aa1e893d44c24ffc2bf7f9d290317d7fb983200312b9e4520703182743058c7f56560be1f38f9fdd9bdb4a479dbfc8188ac97e336ab7f9a80c269fc5a519c2fee37eeea363803119558f9f9087ee34dbb295acb5b61be97d165370cad088d4bc6d2ac2475da33988799527115899fc8e3f8c7f8058c2d66c4c1c38a037ba3bb0baf68789f55bacc6b8f57f49048a5bcf66adb86f86c6e5ed76f2f99fed713203b9e24b803b2035a10de375659e72981618bd117d2e005bacb9d5c64eb7e7b677a19bbacdbdc60223f876faa4134ac37f4a2c93ea8a377c9646c46fa5f245192394bf9d6b6e9ff57832d26927fd869223903e424e70cc5c149dbf1955b4b1bafb17162aa69f250260b68fb26719af663f03ed8357eaea5f50b06380624d98a9db72cfc77e1f317f79fe281c6f205eada985d0b1b3ff0deec60ce7590953beaecdf4b37597bdf561f8e52a09cdba8615f05afbde47577ed5ba82287d983ff4613a3db3e71447efba09094b5df1173654ff201fdb523b5b9caf2448b68cf2de3b1079ed52fb6b462a24dfbd7254b292f1dfe3a0e7e5c43695911c41d5e08da8f356199b3e7bb5169a1772cb2309754f52251d0b3ea7f386172b4a669a42557734e6b901d744187a0af2c593e0deab096a890c58cb8ef50ff951ced21e2f82898cf75b2113e7900ef95db9895ae6dd37b8bb4409da495ef160bee4f9543d8d7124555c6f7283557e39d8cc9c886aafedbfe56d1efa90dae6c18991026863b111c4c26f230e23d756aa8618bc41e31cdf8a68d76f95c5ba61db4894525cbde664c68385779f521114caba"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002f80)={'vcan0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000002fc0)) syz_open_dev$tty1(0xc, 0x4, 0x2) 09:46:28 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002f80)={'vcan0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000002fc0)) syz_open_dev$tty1(0xc, 0x4, 0x2) 09:46:28 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x6) 09:46:28 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "a183b02af2ae93eb40516565618128ebb757dd09ba008ba77cad74910fef020e985a54edf14a8761342835031f2775da0365b0d90e1bfd7a5a44788856c1c8c50f1f6d28677a58ef175360d9d1ecc748bc96a0479e477bf153ede5785ead923a220d69f72c6432df49a77398e5e985dcd72b4da540e929929400a44c3b7a08df00dcd0a14420e377e312fa88eb794e8edeb2145dd561534c3e9e8365ebd03c199cc93bb0d3149e54105130fcc259d4da99e451a89dfcc8d4ad2be7492ddf2b328ef7e8dc32d977fe6bd217617f61c433ec763113c6158253e5ab8bc79dc56779a7f78033f2f31d2daaccad34728fe39046b1488c6d3b73bc9e97aa35587ddd377d9b82beded43d9bb369e50c413eebb3051b8ea2f0868f729649bcef71ba4cb6e0c7502fd78c1fbb2905396ced3102ea9ea654b2a67aa56e3e6ce1f1482901be39f5c56fbd076f3b07cb68cee4c5344b1b8d5846f50302c29e05134647efe75823a35729d8a1afdea265b2a7e782bbb61278b7ef10e9a515fb2832db6f557e4a97380795399245e678f8c628d2b2195bf014a78be0df83861ec1ccd0258e96bf2cc69acc255f9c92cb77f94374cf085e2342443c624f0fad1ecdc44a"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002f80)={'vcan0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000002fc0)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r6, 0x5428) openat$nci(0xffffffffffffff9c, &(0x7f0000003000), 0x2, 0x0) syz_open_dev$hiddev(&(0x7f0000003040), 0x45d, 0x12000) 09:46:28 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "745103659c5f06399b78e79df5f4b006e86e5d964fe98810fc0e078d99e07f5b86c73c9b61fabc8f42991cd3e8e5013210f4a0fe7b52ce8c225bc5833553a33c7d972b4b9ae7d0f4fe6bc6eb7301f5c55acc4a050918c441bc350115989d1c814c1d1e5c68a148b06caf80578cb8e8ae3f44aad8a6e3035c121100251a244e40d300a1891edc7d864edb3f58f9699bcac754290a5e5f0c85347f9d022655110b7faf5debedb63ccfe7b73dfe48291c0588b2263cd734088b847e13d353d10c55f6a0734b3c672f121cd506fde63835d84c395e5a362a6c9e963da032e1b20ae7ce4a941f6f01404e9553077169606fc43a91a3af6bdee8d6732261049d328f792010d46654c493b43698c6e2d565c3e369f5ed9fe98284a3667e53a2967196333dd66a4784c2887c40d9d47164ace55125b9cb04a6ce530d7e8d894be9ce0f42ebb86daf6bcf045b6d4caf593066ed17bc3524dccffa6a3d81f57a6a5ac96db8a1f948e151f395266a0b1f51e488897d95ce566604da658342cb4762247cb8dc92792df158edf0a453c01d1e11ab84e6d6e6b20e7ab0597a354e0d999edbaf0c3c9804a102be8be0a9a3e8a07e94c87e31efe7f3aacb741ccbe34babd87b505c2aaa91aa57b5a1e8f4b148fc8178a3b69b603337075e534d447a9bf1c7ed9d8963c1b9945054773cffcc2ec88622a4679a5df2d9b1202f553b0764a4bd0e9bb3710eaba3a950c6859b46e28f3831a1dd7bb456ea6ca28609c4c122b3c32741953a3316bc81bd2b4994e136aff93916ef9e04d07380175d09a5517030c373e6cd92ff7473785683e86f090b0ee89df884a6fcd94e2c779fddaf50dde4032cce6268c09ac03bd63305b569936f5e0acf5626fe8f97cbd90391357199b93263e41045d16ab760c06aa81c5f9e2f4826afc9d03378a944267a13ff18435371b4e8027d01324df64ba457e6fc39819a93a009d8879e0ebac7ff4716abb9813d9a15159b504b4f95f27ce0cb4b3ad763c02990a0d482378d5a11b4faf5d76221d0b877b63dea521385e4a22983d3955b62b865de8dcc17f35cd9abbc9dce551d972d2417f748df90edf0170d7805adcdd9142465984b83d8b1dc4a03af1936604587987deeff92519cb4a2dfcbbe08ecf8008ecf988d4ce6ed5cc187341317610321e43a32234074c066f25cadc2da913238215e36aee052612cf60ad10ea941771619957b622d13bf2cd6757533b24ac610375756608443c0799a83080c29e0f53e0c2c9146145a5356446b0ae3fe6517b509c910d51186b4cee936a6aa88fd58689b813ee2e3784981e860af7174b95fcba538a1de01486088264d6067944a084c42032068f0014fee6a5336fd9d09c718aae4f1b64f2afb76bfac12ae5f541c9dbc0acec5db257eff65741813e80ea6b68f5d694c64036d001af0361d71700b6ff4fee22fced67e3d824fa53d4ce9e6155e13feebf3ab0409bbfa5923de291e363ecef642a3397999d0fc4cab9bae04fb22f9b12507f0a5e9f91d7bbd85f68a82644f882ddda15e2a5b8db5fd9a3a066bbc422c0cd560a416a1f9c15180e82de5aa3009da573018e7c83ded6047dbe25592cdeb65cfcf99c9f0979829f7da8b5b4b6a6e12e1426e090e7bb9b80563f7e5dc10fd04c62bb75cfb95db3aa6714be447083e844e67099c3ef341b59225f6dc0e975b8c0f5b182631393d9374a187c13465d36219d77b653e90e0cfc59f195e734193b834c905e123dcedef2f00edd85e7c4ea9171094a3921e4a41f68504e66def83780901a092ff7eb86b859df6a833918fb742b0a7c5e6162ab7b7051015477b9df1e996d5c6532e09267ae7fffbb1af5e4d81e528e5d5073430879e52afd712512ed0fd4b2e94c6d3afcc6b677bb25fe304398cd547127df01018e8aeef60f21ba0203a7a0ae6f95c0b1b32672a82b48b0c9cc251bb241afe6e1f59fc524b427b8db2080d62eb775723c18c627ad380cd7eb76b843ca9bb55a115efdb192be4f8bbf9cf9e3090438fd11a0985db1f0e343d788791a9b9a858b5ccd9aa6d427eb71ed6b09300a60f01eaf60a3c0f718afa88a0cf87ef9ca76df0dd3bb1bf198ac557a5d95116e9479c0ab0bbdd258b0487a712881f4a4c2dbfeb5546b6f7a26e515f2fcbde7dda39c9d23f4eed9f68acd266f1538388f2aef02d25e4689be1d56f91ffa238ce12467dbe02c051531868e48df3398440198a2ba72f4200aae0a265ae777c5be791e7b59385a43b0fbaa5d82c544ffcb0a3acd9bcbd7221f7d91bab4807a78cef37499a62802457a3ee4321ea769f77fd5a8b36a8f50147c63d819f7eb8a1cc0cb57d3edd973e903b2042851ec62ca2de5f3723f2d2c587847384a6d46e5c557e592478db98a0723f69b411d65c57fafabe4640290b2074411e4c1a099e1d9d33a37afad89ef9bf549d4c580f4fee975b3d936f48c6d85fcedd5cf0c9583999788635d064ca6997fc2a879ca79914e25f91a300a26da7a0b93688084dd3cae51be02868665ca12afe00e0f2a0c639671c701cee5bf7362afc36c339e1c20979b4c22f4265ceaca69d01b43888687b08775ef315435e1b1ec594ac211857f81aa81c067a5aa81d1a5e262e4b7dbe0c20ee05db29ac18898aa9fe3d1ee22ef5e1fb2e5c175f59b31b558868d3edf8af6c72066101526791399e1f8b340a814c65cb2b63b2b18ff4fdf9759bcf2064e086a213eaaec67beaee674d7271561c115a36a432e6f05e3a4039e45688e06144a468fb4a3591c3468fd33185543110d662e1f31a515b5b734af7f5a959b7ccefd8c24da2e819329b4b0a9719d90b185c5182d395b730d42852334faadaa735dd764234dcd6e654a583c2e022429577384573a221741aabf383c0c86bc681d465739ec338de3440060e6d7cb7ffc8505a390e2b7207e46634469b86304cd9b14af8155b2f2020a0806cbf27c70bde62b991f1bffbfdc6fe3c41aac91b5433a1764367d5dcf1cfa15e14bccc788e7b499d8afb27ceae69fa0629f256d0a40f35b17dd3aa1e893d44c24ffc2bf7f9d290317d7fb983200312b9e4520703182743058c7f56560be1f38f9fdd9bdb4a479dbfc8188ac97e336ab7f9a80c269fc5a519c2fee37eeea363803119558f9f9087ee34dbb295acb5b61be97d165370cad088d4bc6d2ac2475da33988799527115899fc8e3f8c7f8058c2d66c4c1c38a037ba3bb0baf68789f55bacc6b8f57f49048a5bcf66adb86f86c6e5ed76f2f99fed713203b9e24b803b2035a10de375659e72981618bd117d2e005bacb9d5c64eb7e7b677a19bbacdbdc60223f876faa4134ac37f4a2c93ea8a377c9646c46fa5f245192394bf9d6b6e9ff57832d26927fd869223903e424e70cc5c149dbf1955b4b1bafb17162aa69f250260b68fb26719af663f03ed8357eaea5f50b06380624d98a9db72cfc77e1f317f79fe281c6f205eada985d0b1b3ff0deec60ce7590953beaecdf4b37597bdf561f8e52a09cdba8615f05afbde47577ed5ba82287d983ff4613a3db3e71447efba09094b5df1173654ff201fdb523b5b9caf2448b68cf2de3b1079ed52fb6b462a24dfbd7254b292f1dfe3a0e7e5c43695911c41d5e08da8f356199b3e7bb5169a1772cb2309754f52251d0b3ea7f386172b4a669a42557734e6b901d744187a0af2c593e0deab096a890c58cb8ef50ff951ced21e2f82898cf75b2113e7900ef95db9895ae6dd37b8bb4409da495ef160bee4f9543d8d7124555c6f7283557e39d8cc9c886aafedbfe56d1efa90dae6c18991026863b111c4c26f230e23d756aa8618bc41e31cdf8a68d76f95c5ba61db4894525cbde664c68385779f521114caba"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r3, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r4, 0x5428) 09:46:28 executing program 1: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x38800) openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) 09:46:29 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "a183b02af2ae93eb40516565618128ebb757dd09ba008ba77cad74910fef020e985a54edf14a8761342835031f2775da0365b0d90e1bfd7a5a44788856c1c8c50f1f6d28677a58ef175360d9d1ecc748bc96a0479e477bf153ede5785ead923a220d69f72c6432df49a77398e5e985dcd72b4da540e929929400a44c3b7a08df00dcd0a14420e377e312fa88eb794e8edeb2145dd561534c3e9e8365ebd03c199cc93bb0d3149e54105130fcc259d4da99e451a89dfcc8d4ad2be7492ddf2b328ef7e8dc32d977fe6bd217617f61c433ec763113c6158253e5ab8bc79dc56779a7f78033f2f31d2daaccad34728fe39046b1488c6d3b73bc9e97aa35587ddd377d9b82beded43d9bb369e50c413eebb3051b8ea2f0868f729649bcef71ba4cb6e0c7502fd78c1fbb2905396ced3102ea9ea654b2a67aa56e3e6ce1f1482901be39f5c56fbd076f3b07cb68cee4c5344b1b8d5846f50302c29e05134647efe75823a35729d8a1afdea265b2a7e782bbb61278b7ef10e9a515fb2832db6f557e4a97380795399245e678f8c628d2b2195bf014a78be0df83861ec1ccd0258e96bf2cc69acc255f9c92cb77f94374cf085e2342443c624f0fad1ecdc44a"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002f80)={'vcan0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000002fc0)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r6, 0x5428) openat$nci(0xffffffffffffff9c, &(0x7f0000003000), 0x2, 0x0) 09:46:29 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002f80)={'vcan0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000002fc0)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r6, 0x5428) openat$nci(0xffffffffffffff9c, &(0x7f0000003000), 0x2, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000003040), 0x45d, 0x12000) ioctl$HIDIOCGPHYS(r7, 0x80404812, &(0x7f0000003080)) 09:46:29 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r3, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r4, 0x5428) 09:46:29 executing program 1: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) 09:46:29 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "a183b02af2ae93eb40516565618128ebb757dd09ba008ba77cad74910fef020e985a54edf14a8761342835031f2775da0365b0d90e1bfd7a5a44788856c1c8c50f1f6d28677a58ef175360d9d1ecc748bc96a0479e477bf153ede5785ead923a220d69f72c6432df49a77398e5e985dcd72b4da540e929929400a44c3b7a08df00dcd0a14420e377e312fa88eb794e8edeb2145dd561534c3e9e8365ebd03c199cc93bb0d3149e54105130fcc259d4da99e451a89dfcc8d4ad2be7492ddf2b328ef7e8dc32d977fe6bd217617f61c433ec763113c6158253e5ab8bc79dc56779a7f78033f2f31d2daaccad34728fe39046b1488c6d3b73bc9e97aa35587ddd377d9b82beded43d9bb369e50c413eebb3051b8ea2f0868f729649bcef71ba4cb6e0c7502fd78c1fbb2905396ced3102ea9ea654b2a67aa56e3e6ce1f1482901be39f5c56fbd076f3b07cb68cee4c5344b1b8d5846f50302c29e05134647efe75823a35729d8a1afdea265b2a7e782bbb61278b7ef10e9a515fb2832db6f557e4a97380795399245e678f8c628d2b2195bf014a78be0df83861ec1ccd0258e96bf2cc69acc255f9c92cb77f94374cf085e2342443c624f0fad1ecdc44a"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x6) 09:46:29 executing program 1: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) 09:46:29 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "a183b02af2ae93eb40516565618128ebb757dd09ba008ba77cad74910fef020e985a54edf14a8761342835031f2775da0365b0d90e1bfd7a5a44788856c1c8c50f1f6d28677a58ef175360d9d1ecc748bc96a0479e477bf153ede5785ead923a220d69f72c6432df49a77398e5e985dcd72b4da540e929929400a44c3b7a08df00dcd0a14420e377e312fa88eb794e8edeb2145dd561534c3e9e8365ebd03c199cc93bb0d3149e54105130fcc259d4da99e451a89dfcc8d4ad2be7492ddf2b328ef7e8dc32d977fe6bd217617f61c433ec763113c6158253e5ab8bc79dc56779a7f78033f2f31d2daaccad34728fe39046b1488c6d3b73bc9e97aa35587ddd377d9b82beded43d9bb369e50c413eebb3051b8ea2f0868f729649bcef71ba4cb6e0c7502fd78c1fbb2905396ced3102ea9ea654b2a67aa56e3e6ce1f1482901be39f5c56fbd076f3b07cb68cee4c5344b1b8d5846f50302c29e05134647efe75823a35729d8a1afdea265b2a7e782bbb61278b7ef10e9a515fb2832db6f557e4a97380795399245e678f8c628d2b2195bf014a78be0df83861ec1ccd0258e96bf2cc69acc255f9c92cb77f94374cf085e2342443c624f0fad1ecdc44a"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002f80)={'vcan0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000002fc0)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r6, 0x5428) openat$nci(0xffffffffffffff9c, &(0x7f0000003000), 0x2, 0x0) syz_open_dev$hiddev(&(0x7f0000003040), 0x45d, 0x12000) 09:46:29 executing program 1: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) 09:46:29 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) 09:46:29 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002f80)={'vcan0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000002fc0)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r6, 0x5428) openat$nci(0xffffffffffffff9c, &(0x7f0000003000), 0x2, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000003040), 0x45d, 0x12000) ioctl$HIDIOCGPHYS(r7, 0x80404812, &(0x7f0000003080)) 09:46:29 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002f80)={'vcan0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000002fc0)) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) 09:46:29 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x6) 09:46:29 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) 09:46:29 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002f80)={'vcan0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000002fc0)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r6, 0x5428) openat$nci(0xffffffffffffff9c, &(0x7f0000003000), 0x2, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000003040), 0x45d, 0x12000) ioctl$HIDIOCGPHYS(r7, 0x80404812, &(0x7f0000003080)) openat$nci(0xffffffffffffff9c, &(0x7f00000030c0), 0x2, 0x0) 09:46:29 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002f80)={'vcan0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000002fc0)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r6, 0x5428) openat$nci(0xffffffffffffff9c, &(0x7f0000003000), 0x2, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000003040), 0x45d, 0x12000) ioctl$HIDIOCGPHYS(r7, 0x80404812, &(0x7f0000003080)) openat$nci(0xffffffffffffff9c, &(0x7f00000030c0), 0x2, 0x0) 09:46:29 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002f80)={'vcan0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000002fc0)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r6, 0x5428) openat$nci(0xffffffffffffff9c, &(0x7f0000003000), 0x2, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000003040), 0x45d, 0x12000) ioctl$HIDIOCGPHYS(r7, 0x80404812, &(0x7f0000003080)) openat$nci(0xffffffffffffff9c, &(0x7f00000030c0), 0x2, 0x0) 09:46:29 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "a183b02af2ae93eb40516565618128ebb757dd09ba008ba77cad74910fef020e985a54edf14a8761342835031f2775da0365b0d90e1bfd7a5a44788856c1c8c50f1f6d28677a58ef175360d9d1ecc748bc96a0479e477bf153ede5785ead923a220d69f72c6432df49a77398e5e985dcd72b4da540e929929400a44c3b7a08df00dcd0a14420e377e312fa88eb794e8edeb2145dd561534c3e9e8365ebd03c199cc93bb0d3149e54105130fcc259d4da99e451a89dfcc8d4ad2be7492ddf2b328ef7e8dc32d977fe6bd217617f61c433ec763113c6158253e5ab8bc79dc56779a7f78033f2f31d2daaccad34728fe39046b1488c6d3b73bc9e97aa35587ddd377d9b82beded43d9bb369e50c413eebb3051b8ea2f0868f729649bcef71ba4cb6e0c7502fd78c1fbb2905396ced3102ea9ea654b2a67aa56e3e6ce1f1482901be39f5c56fbd076f3b07cb68cee4c5344b1b8d5846f50302c29e05134647efe75823a35729d8a1afdea265b2a7e782bbb61278b7ef10e9a515fb2832db6f557e4a97380795399245e678f8c628d2b2195bf014a78be0df83861ec1ccd0258e96bf2cc69acc255f9c92cb77f94374cf085e2342443c624f0fad1ecdc44a"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002f80)={'vcan0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000002fc0)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r6, 0x5428) openat$nci(0xffffffffffffff9c, &(0x7f0000003000), 0x2, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000003040), 0x45d, 0x12000) ioctl$HIDIOCGPHYS(r7, 0x80404812, &(0x7f0000003080)) openat$nci(0xffffffffffffff9c, &(0x7f00000030c0), 0x2, 0x0) 09:46:29 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) 09:46:29 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xaaf, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000b00)="1d709de7e8b7c88a3a3e7f385abf0fe3382209a67b00b17cfb0ec9bc731abe5db7face2c41c10c2273a1f7a3b5aa562b01cee2db38388a6e8f544bbaf7c5d9f721bcb264ef364a7e83186e7491d55ed1444a65f650eb21bcd15dcec184a5ecc651f4979f94b06ae296f4924a0cbf50e0529c4b2d0e91c07278f3db5105747238813007eee6570ffe331899e7b9248094e2c1eaa2d5b1474d1c23bade58f3a414919a") r0 = syz_open_dev$hidraw(&(0x7f0000000bc0), 0x5, 0x38800) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000c00)={0x1bc, "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"}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x5, 0x4, 0x11d, &(0x7f0000001140)}) read$hidraw(r0, &(0x7f0000001580)=""/121, 0x79) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001600)=0xe) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) r3 = accept4$phonet_pipe(r2, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0x800) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000001700)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001740)={0xf8, "78297a5e3d0e0539ce9ada7f9b9dbdecd65355cc0d3913a050ef80b1ef58f0070a2b6c8c3a71a0942e58549165aa343ffce7f9f56a66fcde52046a709d1b0ca8"}) socketpair(0x2a, 0x4, 0x400, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$can_j1939(r4, &(0x7f0000002e80)={&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/40, 0x28}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000002c40)=""/188, 0xbc}], 0x8, &(0x7f0000002d80)=""/246, 0xf6}, 0x40) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000002ec0)={0x94, "419f529744a0a5d77f440522b68ff69352530f243cd1bcf391094ee1a10f0076154284718400d06c0f30b2ab8b66064fb318cbd13a95e4cd05b7f15d6ea8d184"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002f80)={'vcan0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000002fc0)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r6, 0x5428) openat$nci(0xffffffffffffff9c, &(0x7f0000003000), 0x2, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000003040), 0x45d, 0x12000) ioctl$HIDIOCGPHYS(r7, 0x80404812, &(0x7f0000003080)) openat$nci(0xffffffffffffff9c, &(0x7f00000030c0), 0x2, 0x0) 09:46:30 executing program 1: openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 09:46:30 executing program 1: openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 09:46:30 executing program 1: openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 09:46:30 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 1) [ 448.593940][ T1417] FAULT_INJECTION: forcing a failure. [ 448.593940][ T1417] name failslab, interval 1, probability 0, space 0, times 1 [ 448.613138][ T1417] CPU: 0 PID: 1417 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 448.623188][ T1417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 448.633352][ T1417] Call Trace: [ 448.636739][ T1417] [ 448.639696][ T1417] dump_stack_lvl+0x125/0x1b0 [ 448.644587][ T1417] should_fail_ex+0x496/0x5b0 [ 448.649377][ T1417] should_failslab+0x9/0x20 [ 448.653964][ T1417] kmem_cache_alloc+0x61/0x400 [ 448.658765][ T1417] getname_flags.part.0+0x50/0x4d0 [ 448.663949][ T1417] getname+0x90/0xe0 [ 448.667872][ T1417] do_sys_openat2+0x100/0x1e0 [ 448.672577][ T1417] ? build_open_flags+0x690/0x690 [ 448.677668][ T1417] __x64_sys_openat+0x175/0x210 [ 448.682557][ T1417] ? __ia32_sys_open+0x1e0/0x1e0 [ 448.687525][ T1417] ? ksys_write+0x1a7/0x250 [ 448.692066][ T1417] ? rcu_is_watching+0x12/0xb0 [ 448.696901][ T1417] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 448.702947][ T1417] do_syscall_64+0x38/0xb0 [ 448.707512][ T1417] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 448.713542][ T1417] RIP: 0033:0x7fafba27cae9 [ 448.717984][ T1417] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 09:46:30 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (fail_nth: 1) [ 448.737627][ T1417] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 448.746440][ T1417] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 448.754523][ T1417] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 448.762569][ T1417] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 448.770658][ T1417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 09:46:30 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (fail_nth: 1) 09:46:30 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 2) [ 448.778678][ T1417] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 448.778703][ T1417] 09:46:30 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 1) 09:46:30 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (fail_nth: 1) 09:46:30 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 1) [ 448.945733][ T1422] FAULT_INJECTION: forcing a failure. [ 448.945733][ T1422] name failslab, interval 1, probability 0, space 0, times 0 09:46:30 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 3) [ 449.024105][ T1439] FAULT_INJECTION: forcing a failure. [ 449.024105][ T1439] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 449.044308][ T1432] FAULT_INJECTION: forcing a failure. [ 449.044308][ T1432] name failslab, interval 1, probability 0, space 0, times 0 [ 449.049115][ T1435] FAULT_INJECTION: forcing a failure. [ 449.049115][ T1435] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 449.074932][ T1422] CPU: 0 PID: 1422 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 449.085920][ T1422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 449.096174][ T1422] Call Trace: [ 449.099477][ T1422] [ 449.102425][ T1422] dump_stack_lvl+0x125/0x1b0 [ 449.107163][ T1422] should_fail_ex+0x496/0x5b0 [ 449.111891][ T1422] should_failslab+0x9/0x20 [ 449.116431][ T1422] __kmem_cache_alloc_node+0x5f/0x470 [ 449.121856][ T1422] ? lock_acquire+0x464/0x510 [ 449.126594][ T1422] ? tomoyo_realpath_from_path+0xb9/0x710 [ 449.132385][ T1422] __kmalloc+0x4f/0x100 [ 449.136601][ T1422] tomoyo_realpath_from_path+0xb9/0x710 [ 449.142188][ T1422] ? lock_release+0x4bf/0x680 [ 449.146916][ T1422] ? tomoyo_profile+0x47/0x60 [ 449.151639][ T1422] tomoyo_path_number_perm+0x243/0x590 [ 449.157913][ T1422] ? tomoyo_path_number_perm+0x1eb/0x590 [ 449.163670][ T1422] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 449.169518][ T1422] ? lock_release+0x4bf/0x680 [ 449.174256][ T1422] ? reacquire_held_locks+0x4b0/0x4b0 [ 449.179704][ T1422] ? bit_wait_timeout+0x160/0x160 [ 449.184831][ T1422] ? __fget_files+0x279/0x410 [ 449.189544][ T1422] ? __fget_files+0x279/0x410 [ 449.194252][ T1422] security_file_ioctl+0x72/0xb0 [ 449.199234][ T1422] __x64_sys_ioctl+0xbb/0x210 [ 449.203972][ T1422] do_syscall_64+0x38/0xb0 [ 449.208430][ T1422] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 449.211380][ T1441] FAULT_INJECTION: forcing a failure. [ 449.211380][ T1441] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 449.214348][ T1422] RIP: 0033:0x7ff73407cae9 [ 449.214367][ T1422] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 449.214386][ T1422] RSP: 002b:00007ff734db60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.214407][ T1422] RAX: ffffffffffffffda RBX: 00007ff73419bf80 RCX: 00007ff73407cae9 [ 449.214421][ T1422] RDX: 0000000020000e00 RSI: 0000000000000000 RDI: 0000000000000003 [ 449.214433][ T1422] RBP: 00007ff734db6120 R08: 0000000000000000 R09: 0000000000000000 [ 449.214445][ T1422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.214457][ T1422] R13: 000000000000000b R14: 00007ff73419bf80 R15: 00007fff982d1208 [ 449.214474][ T1422] [ 449.303041][ T1435] CPU: 1 PID: 1435 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 449.313048][ T1435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 449.323209][ T1435] Call Trace: [ 449.326502][ T1435] [ 449.329518][ T1435] dump_stack_lvl+0x125/0x1b0 [ 449.334299][ T1435] should_fail_ex+0x496/0x5b0 [ 449.339000][ T1435] _copy_to_user+0x30/0xb0 [ 449.343535][ T1435] simple_read_from_buffer+0xd0/0x150 [ 449.349193][ T1435] proc_fail_nth_read+0x1b0/0x290 [ 449.354281][ T1435] ? proc_sessionid_read+0x290/0x290 [ 449.359566][ T1435] ? security_file_permission+0xdc/0x100 [ 449.365302][ T1435] ? proc_sessionid_read+0x290/0x290 [ 449.370681][ T1435] vfs_read+0x1ce/0x930 [ 449.374843][ T1435] ? kernel_read+0x1b0/0x1b0 [ 449.379440][ T1435] ? __fget_files+0x279/0x410 [ 449.384210][ T1435] ksys_read+0x12f/0x250 [ 449.388458][ T1435] ? vfs_write+0xe40/0xe40 [ 449.392887][ T1435] ? rcu_is_watching+0x12/0xb0 [ 449.397745][ T1435] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 449.403742][ T1435] do_syscall_64+0x38/0xb0 [ 449.408174][ T1435] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 449.414080][ T1435] RIP: 0033:0x7f72c807b78c [ 449.418502][ T1435] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 449.438201][ T1435] RSP: 002b:00007f72c8d100c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 449.446617][ T1435] RAX: ffffffffffffffda RBX: 00007f72c819bf80 RCX: 00007f72c807b78c [ 449.454777][ T1435] RDX: 000000000000000f RSI: 00007f72c8d10130 RDI: 0000000000000003 [ 449.462922][ T1435] RBP: 00007f72c8d10120 R08: 0000000000000000 R09: 0000000000000000 [ 449.470904][ T1435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.478870][ T1435] R13: 000000000000000b R14: 00007f72c819bf80 R15: 00007ffeaaae7978 [ 449.486847][ T1435] [ 449.504254][ T1432] CPU: 0 PID: 1432 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 449.506469][ T1443] FAULT_INJECTION: forcing a failure. [ 449.506469][ T1443] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 449.514550][ T1432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 449.514567][ T1432] Call Trace: [ 449.514575][ T1432] [ 449.514582][ T1432] dump_stack_lvl+0x125/0x1b0 [ 449.514616][ T1432] should_fail_ex+0x496/0x5b0 [ 449.514656][ T1432] should_failslab+0x9/0x20 [ 449.514684][ T1432] __kmem_cache_alloc_node+0x5f/0x470 [ 449.514710][ T1432] ? lock_acquire+0x464/0x510 [ 449.514740][ T1432] ? tomoyo_realpath_from_path+0xb9/0x710 [ 449.514766][ T1432] __kmalloc+0x4f/0x100 [ 449.514795][ T1432] tomoyo_realpath_from_path+0xb9/0x710 [ 449.514821][ T1432] ? lock_release+0x4bf/0x680 [ 449.514844][ T1432] ? tomoyo_profile+0x47/0x60 [ 449.567151][ T1422] ERROR: Out of memory at tomoyo_realpath_from_path. [ 449.568625][ T1432] tomoyo_path_number_perm+0x243/0x590 [ 449.606296][ T1432] ? tomoyo_path_number_perm+0x1eb/0x590 [ 449.611959][ T1432] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 449.618233][ T1432] ? lock_release+0x4bf/0x680 [ 449.623109][ T1432] ? reacquire_held_locks+0x4b0/0x4b0 [ 449.628508][ T1432] ? bit_wait_timeout+0x160/0x160 [ 449.633749][ T1432] ? __fget_files+0x279/0x410 [ 449.638461][ T1432] ? __fget_files+0x279/0x410 [ 449.643181][ T1432] security_file_ioctl+0x72/0xb0 [ 449.648242][ T1432] __x64_sys_ioctl+0xbb/0x210 [ 449.652958][ T1432] do_syscall_64+0x38/0xb0 [ 449.657417][ T1432] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 449.663353][ T1432] RIP: 0033:0x7f281a47cae9 [ 449.667793][ T1432] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 449.687515][ T1432] RSP: 002b:00007f2818ffe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.696041][ T1432] RAX: ffffffffffffffda RBX: 00007f281a59bf80 RCX: 00007f281a47cae9 [ 449.704037][ T1432] RDX: 0000000020000e00 RSI: 0000000000000000 RDI: 0000000000000003 [ 449.712026][ T1432] RBP: 00007f2818ffe120 R08: 0000000000000000 R09: 0000000000000000 [ 449.720019][ T1432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.728017][ T1432] R13: 000000000000000b R14: 00007f281a59bf80 R15: 00007ffc3cd25e88 [ 449.736002][ T1432] [ 449.739451][ T1439] CPU: 1 PID: 1439 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 449.749554][ T1439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 449.759726][ T1439] Call Trace: [ 449.763008][ T1439] [ 449.766022][ T1439] dump_stack_lvl+0x125/0x1b0 [ 449.770881][ T1439] should_fail_ex+0x496/0x5b0 [ 449.775578][ T1439] _copy_to_user+0x30/0xb0 [ 449.779995][ T1439] simple_read_from_buffer+0xd0/0x150 [ 449.785461][ T1439] proc_fail_nth_read+0x1b0/0x290 [ 449.790489][ T1439] ? proc_sessionid_read+0x290/0x290 [ 449.795860][ T1439] ? security_file_permission+0xdc/0x100 [ 449.801513][ T1439] ? proc_sessionid_read+0x290/0x290 [ 449.806816][ T1439] vfs_read+0x1ce/0x930 [ 449.811005][ T1439] ? kernel_read+0x1b0/0x1b0 [ 449.815711][ T1439] ? __fget_files+0x279/0x410 [ 449.820410][ T1439] ksys_read+0x12f/0x250 [ 449.824677][ T1439] ? vfs_write+0xe40/0xe40 [ 449.829116][ T1439] ? rcu_is_watching+0x12/0xb0 [ 449.833890][ T1439] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 449.839883][ T1439] do_syscall_64+0x38/0xb0 [ 449.844326][ T1439] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 449.850252][ T1439] RIP: 0033:0x7fab0987b78c [ 449.854668][ T1439] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 449.874285][ T1439] RSP: 002b:00007fab0a68b0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 449.882698][ T1439] RAX: ffffffffffffffda RBX: 00007fab0999bf80 RCX: 00007fab0987b78c [ 449.890775][ T1439] RDX: 000000000000000f RSI: 00007fab0a68b130 RDI: 0000000000000003 [ 449.898749][ T1439] RBP: 00007fab0a68b120 R08: 0000000000000000 R09: 0000000000000000 [ 449.906721][ T1439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.914692][ T1439] R13: 000000000000000b R14: 00007fab0999bf80 R15: 00007ffd20851a98 [ 449.922762][ T1439] [ 449.933096][ T1432] ERROR: Out of memory at tomoyo_realpath_from_path. [ 449.958026][ T1443] CPU: 0 PID: 1443 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 449.968062][ T1443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 449.978137][ T1443] Call Trace: [ 449.981425][ T1443] [ 449.984391][ T1443] dump_stack_lvl+0x125/0x1b0 [ 449.989083][ T1443] should_fail_ex+0x496/0x5b0 [ 449.993780][ T1443] strncpy_from_user+0x38/0x300 [ 449.998643][ T1443] getname_flags.part.0+0x93/0x4d0 [ 450.003766][ T1443] getname+0x90/0xe0 [ 450.007665][ T1443] do_sys_openat2+0x100/0x1e0 [ 450.012544][ T1443] ? build_open_flags+0x690/0x690 [ 450.017677][ T1443] __x64_sys_openat+0x175/0x210 [ 450.022628][ T1443] ? __ia32_sys_open+0x1e0/0x1e0 [ 450.027750][ T1443] ? ksys_write+0x1a7/0x250 [ 450.032279][ T1443] ? rcu_is_watching+0x12/0xb0 [ 450.037058][ T1443] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 450.043052][ T1443] do_syscall_64+0x38/0xb0 [ 450.047482][ T1443] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 450.053393][ T1443] RIP: 0033:0x7fafba27cae9 [ 450.057804][ T1443] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 450.077505][ T1443] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 450.086110][ T1443] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 450.094470][ T1443] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 450.102444][ T1443] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 450.110415][ T1443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.118383][ T1443] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 450.126720][ T1443] 09:46:31 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (fail_nth: 2) [ 450.153100][ T1441] CPU: 0 PID: 1441 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 450.163235][ T1441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 450.173318][ T1441] Call Trace: [ 450.176620][ T1441] [ 450.179564][ T1441] dump_stack_lvl+0x125/0x1b0 [ 450.184394][ T1441] should_fail_ex+0x496/0x5b0 [ 450.189144][ T1441] _copy_to_user+0x30/0xb0 [ 450.193597][ T1441] simple_read_from_buffer+0xd0/0x150 09:46:31 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 4) [ 450.199108][ T1441] proc_fail_nth_read+0x1b0/0x290 [ 450.205866][ T1441] ? proc_sessionid_read+0x290/0x290 [ 450.211185][ T1441] ? security_file_permission+0xdc/0x100 [ 450.216873][ T1441] ? proc_sessionid_read+0x290/0x290 [ 450.222280][ T1441] vfs_read+0x1ce/0x930 [ 450.226477][ T1441] ? kernel_read+0x1b0/0x1b0 [ 450.231110][ T1441] ? __fget_files+0x279/0x410 [ 450.235832][ T1441] ksys_read+0x12f/0x250 [ 450.240111][ T1441] ? vfs_write+0xe40/0xe40 [ 450.244563][ T1441] ? rcu_is_watching+0x12/0xb0 [ 450.249358][ T1441] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 450.255806][ T1441] do_syscall_64+0x38/0xb0 [ 450.260273][ T1441] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 450.266212][ T1441] RIP: 0033:0x7fa0c347b78c [ 450.270645][ T1441] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 450.290702][ T1441] RSP: 002b:00007fa0c414f0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.299134][ T1441] RAX: ffffffffffffffda RBX: 00007fa0c359bf80 RCX: 00007fa0c347b78c [ 450.307136][ T1441] RDX: 000000000000000f RSI: 00007fa0c414f130 RDI: 0000000000000003 [ 450.315191][ T1441] RBP: 00007fa0c414f120 R08: 0000000000000000 R09: 0000000000000000 [ 450.323268][ T1441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.331439][ T1441] R13: 000000000000000b R14: 00007fa0c359bf80 R15: 00007fff95143428 [ 450.339424][ T1441] 09:46:32 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:46:32 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) 09:46:32 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:32 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x3) [ 450.433486][ T1451] FAULT_INJECTION: forcing a failure. [ 450.433486][ T1451] name failslab, interval 1, probability 0, space 0, times 0 09:46:32 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (fail_nth: 2) 09:46:32 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x3) 09:46:32 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x3) 09:46:32 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x300) [ 450.563146][ T1451] CPU: 0 PID: 1451 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 450.573184][ T1451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 450.583403][ T1451] Call Trace: [ 450.586750][ T1451] [ 450.589701][ T1451] dump_stack_lvl+0x125/0x1b0 [ 450.594419][ T1451] should_fail_ex+0x496/0x5b0 [ 450.599313][ T1451] should_failslab+0x9/0x20 [ 450.603860][ T1451] kmem_cache_alloc+0x61/0x400 [ 450.608754][ T1451] ? _parse_integer_limit+0x17f/0x1d0 [ 450.614251][ T1451] alloc_empty_file+0x73/0x1d0 [ 450.619233][ T1451] path_openat+0xdc/0x29c0 [ 450.623771][ T1451] ? __x64_sys_openat+0x175/0x210 [ 450.628923][ T1451] ? do_syscall_64+0x38/0xb0 [ 450.633539][ T1451] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 450.639729][ T1451] ? path_lookupat+0x770/0x770 [ 450.644513][ T1451] do_filp_open+0x1de/0x430 [ 450.649108][ T1451] ? may_open_dev+0xf0/0xf0 [ 450.653612][ T1451] ? expand_files+0x442/0x910 [ 450.658299][ T1451] ? _raw_spin_unlock+0x28/0x40 [ 450.663158][ T1451] ? alloc_fd+0x2da/0x6c0 [ 450.667498][ T1451] do_sys_openat2+0x176/0x1e0 [ 450.672241][ T1451] ? build_open_flags+0x690/0x690 [ 450.677271][ T1451] __x64_sys_openat+0x175/0x210 [ 450.682124][ T1451] ? __ia32_sys_open+0x1e0/0x1e0 [ 450.687063][ T1451] ? ksys_write+0x1a7/0x250 [ 450.691571][ T1451] ? rcu_is_watching+0x12/0xb0 [ 450.696333][ T1451] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 450.702412][ T1451] do_syscall_64+0x38/0xb0 [ 450.706840][ T1451] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 450.712747][ T1451] RIP: 0033:0x7fafba27cae9 [ 450.717161][ T1451] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 450.736955][ T1451] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 450.745369][ T1451] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 450.753339][ T1451] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 450.761308][ T1451] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 450.769623][ T1451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.777592][ T1451] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 450.785565][ T1451] [ 450.841867][ T1457] FAULT_INJECTION: forcing a failure. [ 450.841867][ T1457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.927410][ T1457] CPU: 0 PID: 1457 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 450.937447][ T1457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 450.947525][ T1457] Call Trace: [ 450.950826][ T1457] [ 450.953769][ T1457] dump_stack_lvl+0x125/0x1b0 [ 450.958488][ T1457] should_fail_ex+0x496/0x5b0 [ 450.963218][ T1457] _copy_from_user+0x30/0xf0 [ 450.967849][ T1457] kstrtouint_from_user+0xd7/0x1b0 [ 450.973005][ T1457] ? kstrtouint+0x130/0x130 [ 450.977547][ T1457] ? preempt_count_sub+0x150/0x150 [ 450.982704][ T1457] ? 0xffffffff81000000 [ 450.986882][ T1457] ? lock_acquire+0x464/0x510 [ 450.991606][ T1457] ? lock_sync+0x190/0x190 [ 450.996055][ T1457] proc_fail_nth_write+0x84/0x270 [ 451.001199][ T1457] ? proc_task_getattr+0x240/0x240 [ 451.006341][ T1457] ? preempt_count_sub+0x150/0x150 [ 451.011502][ T1457] vfs_write+0x2a4/0xe40 [ 451.015779][ T1457] ? proc_task_getattr+0x240/0x240 [ 451.021009][ T1457] ? kernel_write+0x6c0/0x6c0 [ 451.025727][ T1457] ? __fget_files+0x279/0x410 [ 451.030443][ T1457] ksys_write+0x12f/0x250 [ 451.034822][ T1457] ? __ia32_sys_read+0xb0/0xb0 [ 451.039628][ T1457] ? rcu_is_watching+0x12/0xb0 [ 451.044426][ T1457] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 451.050528][ T1457] do_syscall_64+0x38/0xb0 [ 451.054984][ T1457] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 451.060938][ T1457] RIP: 0033:0x7ff73407b82f [ 451.065378][ T1457] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 451.085015][ T1457] RSP: 002b:00007ff734d950c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 451.093455][ T1457] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff73407b82f [ 451.101710][ T1457] RDX: 0000000000000001 RSI: 00007ff734d95130 RDI: 0000000000000004 [ 451.109881][ T1457] RBP: 00007ff734d95120 R08: 0000000000000000 R09: 0000000000000000 [ 451.117891][ T1457] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 09:46:32 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x300) 09:46:32 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x3000000) [ 451.126064][ T1457] R13: 000000000000006e R14: 00007ff73419c050 R15: 00007fff982d1208 [ 451.134155][ T1457] [ 451.161887][ T1467] FAULT_INJECTION: forcing a failure. [ 451.161887][ T1467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.185462][ T1467] CPU: 0 PID: 1467 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 451.195503][ T1467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 451.205578][ T1467] Call Trace: [ 451.208879][ T1467] [ 451.211836][ T1467] dump_stack_lvl+0x125/0x1b0 [ 451.216559][ T1467] should_fail_ex+0x496/0x5b0 [ 451.221286][ T1467] _copy_from_user+0x30/0xf0 [ 451.226004][ T1467] kstrtouint_from_user+0xd7/0x1b0 [ 451.231154][ T1467] ? kstrtouint+0x130/0x130 [ 451.235690][ T1467] ? preempt_count_sub+0x150/0x150 [ 451.240927][ T1467] ? 0xffffffff81000000 [ 451.245107][ T1467] ? lock_acquire+0x464/0x510 [ 451.249820][ T1467] ? lock_sync+0x190/0x190 [ 451.254264][ T1467] proc_fail_nth_write+0x84/0x270 [ 451.259306][ T1467] ? proc_task_getattr+0x240/0x240 [ 451.264600][ T1467] ? preempt_count_sub+0x150/0x150 [ 451.269842][ T1467] vfs_write+0x2a4/0xe40 [ 451.274183][ T1467] ? proc_task_getattr+0x240/0x240 [ 451.279301][ T1467] ? kernel_write+0x6c0/0x6c0 [ 451.284002][ T1467] ? __fget_files+0x279/0x410 [ 451.288695][ T1467] ksys_write+0x12f/0x250 [ 451.293037][ T1467] ? __ia32_sys_read+0xb0/0xb0 [ 451.297810][ T1467] ? rcu_is_watching+0x12/0xb0 [ 451.302596][ T1467] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 451.308606][ T1467] do_syscall_64+0x38/0xb0 [ 451.313038][ T1467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 451.318952][ T1467] RIP: 0033:0x7f281a47b82f [ 451.323364][ T1467] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 451.343246][ T1467] RSP: 002b:00007f2818fdd0c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 451.351666][ T1467] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f281a47b82f [ 451.359639][ T1467] RDX: 0000000000000001 RSI: 00007f2818fdd130 RDI: 0000000000000004 [ 451.367749][ T1467] RBP: 00007f2818fdd120 R08: 0000000000000000 R09: 0000000000000000 [ 451.375814][ T1467] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 451.383822][ T1467] R13: 000000000000006e R14: 00007f281a59c050 R15: 00007ffc3cd25e88 [ 451.391798][ T1467] 09:46:33 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:33 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x300) 09:46:33 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 5) [ 451.440622][ T1455] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 451.475400][ T1464] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 451.511542][ T1477] FAULT_INJECTION: forcing a failure. [ 451.511542][ T1477] name failslab, interval 1, probability 0, space 0, times 0 [ 451.549720][ T1477] CPU: 0 PID: 1477 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 451.559769][ T1477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 451.569852][ T1477] Call Trace: [ 451.573151][ T1477] [ 451.576189][ T1477] dump_stack_lvl+0x125/0x1b0 [ 451.581082][ T1477] should_fail_ex+0x496/0x5b0 [ 451.585896][ T1477] should_failslab+0x9/0x20 [ 451.590442][ T1477] kmem_cache_alloc+0x61/0x400 [ 451.595243][ T1477] security_file_alloc+0x41/0x250 [ 451.600314][ T1477] init_file+0xb9/0x2d0 [ 451.604512][ T1477] alloc_empty_file+0x91/0x1d0 [ 451.609322][ T1477] path_openat+0xdc/0x29c0 [ 451.613772][ T1477] ? __x64_sys_openat+0x175/0x210 [ 451.618841][ T1477] ? do_syscall_64+0x38/0xb0 09:46:33 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x300000000000000) 09:46:33 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x3000000) [ 451.623569][ T1477] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 451.629881][ T1477] ? path_lookupat+0x770/0x770 [ 451.634699][ T1477] do_filp_open+0x1de/0x430 [ 451.639244][ T1477] ? may_open_dev+0xf0/0xf0 [ 451.643775][ T1477] ? expand_files+0x442/0x910 [ 451.648673][ T1477] ? _raw_spin_unlock+0x28/0x40 [ 451.654524][ T1477] ? alloc_fd+0x2da/0x6c0 [ 451.659087][ T1477] do_sys_openat2+0x176/0x1e0 [ 451.663809][ T1477] ? build_open_flags+0x690/0x690 [ 451.668873][ T1477] __x64_sys_openat+0x175/0x210 09:46:33 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) [ 451.673763][ T1477] ? __ia32_sys_open+0x1e0/0x1e0 [ 451.679006][ T1477] ? ksys_write+0x1a7/0x250 [ 451.683571][ T1477] ? rcu_is_watching+0x12/0xb0 [ 451.688366][ T1477] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 451.694390][ T1477] do_syscall_64+0x38/0xb0 [ 451.698847][ T1477] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 451.704796][ T1477] RIP: 0033:0x7fafba27cae9 [ 451.709237][ T1477] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 451.728958][ T1477] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 451.737401][ T1477] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 451.745490][ T1477] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 451.753488][ T1477] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 451.761489][ T1477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 09:46:33 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x1040}, 0x0) [ 451.769492][ T1477] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 451.777513][ T1477] 09:46:33 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x300000000000000) 09:46:33 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x3000000) 09:46:33 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 6) 09:46:33 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:33 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x1040}, 0x0) 09:46:33 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x300000000000000) [ 451.932407][ T1501] FAULT_INJECTION: forcing a failure. [ 451.932407][ T1501] name failslab, interval 1, probability 0, space 0, times 0 [ 451.946226][ T1501] CPU: 1 PID: 1501 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 451.956425][ T1501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 451.966592][ T1501] Call Trace: [ 451.969981][ T1501] [ 451.972942][ T1501] dump_stack_lvl+0x125/0x1b0 [ 451.977751][ T1501] should_fail_ex+0x496/0x5b0 [ 451.982481][ T1501] should_failslab+0x9/0x20 [ 451.987188][ T1501] __kmem_cache_alloc_node+0x5f/0x470 [ 451.992722][ T1501] ? tomoyo_encode2+0x100/0x3d0 [ 451.997616][ T1501] __kmalloc+0x4f/0x100 [ 452.001824][ T1501] tomoyo_encode2+0x100/0x3d0 [ 452.006720][ T1501] ? rcu_is_watching+0x12/0xb0 [ 452.011500][ T1501] tomoyo_encode+0x29/0x50 [ 452.015930][ T1501] tomoyo_realpath_from_path+0x196/0x710 [ 452.021572][ T1501] tomoyo_check_open_permission+0x2aa/0x3b0 [ 452.027476][ T1501] ? tomoyo_path_number_perm+0x590/0x590 [ 452.033117][ T1501] ? rcu_is_watching+0x12/0xb0 [ 452.037893][ T1501] ? lock_release+0x4bf/0x680 [ 452.042672][ T1501] ? selinux_inode_permission+0xe2/0x5f0 [ 452.048589][ T1501] ? hook_path_mknod+0x670/0x670 [ 452.053631][ T1501] ? reacquire_held_locks+0x4b0/0x4b0 [ 452.059045][ T1501] ? spin_bug+0x1d0/0x1d0 [ 452.063392][ T1501] ? make_vfsgid+0x108/0x160 [ 452.068037][ T1501] tomoyo_file_open+0xa8/0xd0 [ 452.072728][ T1501] security_file_open+0x6a/0xe0 [ 452.077599][ T1501] do_dentry_open+0x538/0x1730 [ 452.082370][ T1501] ? may_open+0x1f2/0x400 [ 452.086808][ T1501] path_openat+0x19af/0x29c0 [ 452.091412][ T1501] ? path_lookupat+0x770/0x770 [ 452.096277][ T1501] do_filp_open+0x1de/0x430 [ 452.100782][ T1501] ? may_open_dev+0xf0/0xf0 [ 452.105297][ T1501] ? expand_files+0x442/0x910 [ 452.109986][ T1501] ? _raw_spin_unlock+0x28/0x40 [ 452.114848][ T1501] ? alloc_fd+0x2da/0x6c0 [ 452.119197][ T1501] do_sys_openat2+0x176/0x1e0 [ 452.123888][ T1501] ? build_open_flags+0x690/0x690 [ 452.128921][ T1501] __x64_sys_openat+0x175/0x210 [ 452.133776][ T1501] ? __ia32_sys_open+0x1e0/0x1e0 [ 452.138728][ T1501] ? ksys_write+0x1a7/0x250 [ 452.143239][ T1501] ? rcu_is_watching+0x12/0xb0 [ 452.148007][ T1501] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 452.154264][ T1501] do_syscall_64+0x38/0xb0 [ 452.158698][ T1501] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 452.164610][ T1501] RIP: 0033:0x7fafba27cae9 [ 452.169655][ T1501] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 452.189453][ T1501] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 452.197954][ T1501] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 452.205928][ T1501] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 452.213902][ T1501] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 452.221873][ T1501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 09:46:34 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x1, 0x3, [{r1, 0x0, 0x10000}, {0xffffffffffffffff, 0x0, 0x2000, 0x100000000}, {r0, 0x0, 0x4000, 0x1000}]}) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x6) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000400)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x4) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000001c0)={0x4, r3}, 0x0) [ 452.229938][ T1501] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 452.237919][ T1501] [ 452.252086][ T1501] ERROR: Out of memory at tomoyo_realpath_from_path. 09:46:34 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x1040}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x1040}, 0x0) 09:46:34 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:34 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x1, 0x3, [{r1, 0x0, 0x10000}, {0xffffffffffffffff, 0x0, 0x2000, 0x100000000}, {r0, 0x0, 0x4000, 0x1000}]}) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r2, 0x540a, 0x3) (async, rerun: 64) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) (async, rerun: 64) ioctl$KDSKBLED(r2, 0x4b65, 0x6) (async, rerun: 64) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000400)) (async, rerun: 64) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x4) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000001c0)={0x4, r3}, 0x0) 09:46:34 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) recvfrom$phonet(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x40010042, &(0x7f0000001080)={0x23, 0x9e, 0x20, 0x6}, 0x10) 09:46:34 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf252b0000000a0001007770616e340000000c0005000202aaaaaaaaaaaa0a0001007770616e3300000008000200", @ANYRES32=0x0, @ANYBLOB="454e3bb030c9b8894d338f49fd9953cea4f0e8feb00482e3c879202c529004006c8aa62bc19b812495286e9aa5dad23dc7e1011c9c13082fd4f8b9a0d2fa0017d92cfc278f0e4a4ac7c586f21ff9b56bfc6b876277d9b1e78585314b02e1eb619b2eff0f2254"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40080c4) read$hidraw(0xffffffffffffffff, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000240), 0x20006, 0x4225c0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x5, 0x4, 0xabf, 0x7c20, 0x2}) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000140)) 09:46:34 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) recvfrom$phonet(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x40010042, &(0x7f0000001080)={0x23, 0x9e, 0x20, 0x6}, 0x10) 09:46:34 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf252b0000000a0001007770616e340000000c0005000202aaaaaaaaaaaa0a0001007770616e3300000008000200", @ANYRES32=0x0, @ANYBLOB="454e3bb030c9b8894d338f49fd9953cea4f0e8feb00482e3c879202c529004006c8aa62bc19b812495286e9aa5dad23dc7e1011c9c13082fd4f8b9a0d2fa0017d92cfc278f0e4a4ac7c586f21ff9b56bfc6b876277d9b1e78585314b02e1eb619b2eff0f2254"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40080c4) read$hidraw(0xffffffffffffffff, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000240), 0x20006, 0x4225c0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x5, 0x4, 0xabf, 0x7c20, 0x2}) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000140)) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf252b0000000a0001007770616e340000000c0005000202aaaaaaaaaaaa0a0001007770616e3300000008000200", @ANYRES32=0x0, @ANYBLOB="454e3bb030c9b8894d338f49fd9953cea4f0e8feb00482e3c879202c529004006c8aa62bc19b812495286e9aa5dad23dc7e1011c9c13082fd4f8b9a0d2fa0017d92cfc278f0e4a4ac7c586f21ff9b56bfc6b876277d9b1e78585314b02e1eb619b2eff0f2254"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40080c4) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000240), 0x20006, 0x4225c0) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x5, 0x4, 0xabf, 0x7c20, 0x2}) (async) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) (async) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000140)) (async) 09:46:34 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 7) 09:46:34 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x3, &(0x7f0000000e00)) 09:46:34 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf252b0000000a0001007770616e340000000c0005000202aaaaaaaaaaaa0a0001007770616e3300000008000200", @ANYRES32=0x0, @ANYBLOB="454e3bb030c9b8894d338f49fd9953cea4f0e8feb00482e3c879202c529004006c8aa62bc19b812495286e9aa5dad23dc7e1011c9c13082fd4f8b9a0d2fa0017d92cfc278f0e4a4ac7c586f21ff9b56bfc6b876277d9b1e78585314b02e1eb619b2eff0f2254"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40080c4) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000240), 0x20006, 0x4225c0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x5, 0x4, 0xabf, 0x7c20, 0x2}) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000140)) 09:46:34 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x1, 0x3, [{r1, 0x0, 0x10000}, {0xffffffffffffffff, 0x0, 0x2000, 0x100000000}, {r0, 0x0, 0x4000, 0x1000}]}) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x1, 0x3, [{r1, 0x0, 0x10000}, {0xffffffffffffffff, 0x0, 0x2000, 0x100000000}, {r0, 0x0, 0x4000, 0x1000}]}) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) (async) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x6) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000400)) (async) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000400)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x4) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) (async) r3 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000001c0)={0x4, r3}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000001c0)={0x4, r3}, 0x0) 09:46:34 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) recvfrom$phonet(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x40010042, &(0x7f0000001080)={0x23, 0x9e, 0x20, 0x6}, 0x10) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) recvfrom$phonet(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x40010042, &(0x7f0000001080)={0x23, 0x9e, 0x20, 0x6}, 0x10) (async) 09:46:34 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x2, &(0x7f0000000e00)) 09:46:34 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 8) 09:46:34 executing program 4: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f00000000c0)=""/150) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x6) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000180)=""/4096) 09:46:34 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x6) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000180)) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000855) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x400) 09:46:34 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x300, &(0x7f0000000e00)) 09:46:34 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x3, &(0x7f0000000e00)) 09:46:34 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x100000000, 0x200) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) [ 452.847036][ T1572] FAULT_INJECTION: forcing a failure. [ 452.847036][ T1572] name failslab, interval 1, probability 0, space 0, times 0 [ 452.883057][ T1572] CPU: 0 PID: 1572 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 452.893095][ T1572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 452.903173][ T1572] Call Trace: [ 452.906475][ T1572] [ 452.909430][ T1572] dump_stack_lvl+0x125/0x1b0 [ 452.914149][ T1572] should_fail_ex+0x496/0x5b0 [ 452.918895][ T1572] should_failslab+0x9/0x20 [ 452.923467][ T1572] __kmem_cache_alloc_node+0x5f/0x470 [ 452.929575][ T1572] kmalloc_trace+0x25/0xe0 [ 452.934053][ T1572] virtual_ncidev_open+0x49/0x220 [ 452.939229][ T1572] ? virtual_ncidev_read+0x4e0/0x4e0 [ 452.944559][ T1572] misc_open+0x3da/0x4c0 [ 452.948910][ T1572] ? misc_devnode+0x120/0x120 [ 452.953610][ T1572] chrdev_open+0x277/0x700 [ 452.958046][ T1572] ? __unregister_chrdev+0x100/0x100 [ 452.963334][ T1572] ? fsnotify_perm.part.0+0x25d/0x630 [ 452.968723][ T1572] ? fsnotify_perm.part.0+0x268/0x630 [ 452.974284][ T1572] do_dentry_open+0x88b/0x1730 [ 452.979051][ T1572] ? __unregister_chrdev+0x100/0x100 [ 452.984346][ T1572] ? may_open+0x1f2/0x400 [ 452.988687][ T1572] path_openat+0x19af/0x29c0 [ 452.993289][ T1572] ? path_lookupat+0x770/0x770 [ 452.998071][ T1572] do_filp_open+0x1de/0x430 [ 453.002576][ T1572] ? may_open_dev+0xf0/0xf0 [ 453.007081][ T1572] ? expand_files+0x442/0x910 [ 453.011771][ T1572] ? _raw_spin_unlock+0x28/0x40 [ 453.016718][ T1572] ? alloc_fd+0x2da/0x6c0 [ 453.021053][ T1572] do_sys_openat2+0x176/0x1e0 [ 453.025798][ T1572] ? build_open_flags+0x690/0x690 [ 453.030834][ T1572] __x64_sys_openat+0x175/0x210 [ 453.035721][ T1572] ? __ia32_sys_open+0x1e0/0x1e0 [ 453.040661][ T1572] ? ksys_write+0x1a7/0x250 [ 453.045865][ T1572] ? rcu_is_watching+0x12/0xb0 [ 453.050633][ T1572] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 453.056631][ T1572] do_syscall_64+0x38/0xb0 [ 453.061060][ T1572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 453.066969][ T1572] RIP: 0033:0x7fafba27cae9 [ 453.071471][ T1572] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 09:46:34 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x100000000, 0x200) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) 09:46:34 executing program 4: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) (async) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f00000000c0)=""/150) (async) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) (async) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) (async) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000180)=""/4096) 09:46:34 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r2, 0x540a, 0x3) (async) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x6) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000180)) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000855) (async) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000855) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x400) [ 453.091345][ T1572] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 453.099769][ T1572] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 453.107742][ T1572] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 453.115803][ T1572] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 453.123773][ T1572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.131744][ T1572] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 453.139717][ T1572] 09:46:34 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x4, &(0x7f0000000e00)) 09:46:35 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 9) 09:46:35 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x3000000, &(0x7f0000000e00)) 09:46:35 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x100000000, 0x200) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) 09:46:35 executing program 4: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f00000000c0)=""/150) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000180)=""/4096) 09:46:35 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) (async) ioctl$KDSKBLED(r2, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000180)) (async) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000855) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x400) 09:46:35 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x5, &(0x7f0000000e00)) [ 453.314216][ T1601] FAULT_INJECTION: forcing a failure. [ 453.314216][ T1601] name failslab, interval 1, probability 0, space 0, times 0 [ 453.392998][ T1601] CPU: 0 PID: 1601 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 453.403048][ T1601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 453.413143][ T1601] Call Trace: [ 453.416453][ T1601] [ 453.419409][ T1601] dump_stack_lvl+0x125/0x1b0 [ 453.424139][ T1601] should_fail_ex+0x496/0x5b0 [ 453.429055][ T1601] should_failslab+0x9/0x20 [ 453.433618][ T1601] __kmem_cache_alloc_node+0x5f/0x470 [ 453.439216][ T1601] kmalloc_trace+0x25/0xe0 [ 453.443683][ T1601] virtual_ncidev_open+0x49/0x220 [ 453.448983][ T1601] ? virtual_ncidev_read+0x4e0/0x4e0 [ 453.454329][ T1601] misc_open+0x3da/0x4c0 [ 453.458611][ T1601] ? misc_devnode+0x120/0x120 [ 453.463331][ T1601] chrdev_open+0x277/0x700 [ 453.467781][ T1601] ? __unregister_chrdev+0x100/0x100 [ 453.473364][ T1601] ? fsnotify_perm.part.0+0x25d/0x630 [ 453.478802][ T1601] ? fsnotify_perm.part.0+0x268/0x630 [ 453.484348][ T1601] do_dentry_open+0x88b/0x1730 [ 453.489150][ T1601] ? __unregister_chrdev+0x100/0x100 [ 453.494553][ T1601] ? may_open+0x1f2/0x400 [ 453.498935][ T1601] path_openat+0x19af/0x29c0 [ 453.503565][ T1601] ? path_lookupat+0x770/0x770 [ 453.508903][ T1601] do_filp_open+0x1de/0x430 [ 453.513456][ T1601] ? may_open_dev+0xf0/0xf0 [ 453.518092][ T1601] ? expand_files+0x442/0x910 [ 453.522819][ T1601] ? _raw_spin_unlock+0x28/0x40 [ 453.527708][ T1601] ? alloc_fd+0x2da/0x6c0 [ 453.532101][ T1601] do_sys_openat2+0x176/0x1e0 [ 453.536823][ T1601] ? build_open_flags+0x690/0x690 [ 453.541888][ T1601] __x64_sys_openat+0x175/0x210 [ 453.546777][ T1601] ? __ia32_sys_open+0x1e0/0x1e0 [ 453.551760][ T1601] ? ksys_write+0x1a7/0x250 [ 453.556312][ T1601] ? rcu_is_watching+0x12/0xb0 [ 453.561117][ T1601] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 453.567222][ T1601] do_syscall_64+0x38/0xb0 [ 453.571703][ T1601] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 453.577639][ T1601] RIP: 0033:0x7fafba27cae9 [ 453.582106][ T1601] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 453.601830][ T1601] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 453.610362][ T1601] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 453.618537][ T1601] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 453.626804][ T1601] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 453.634804][ T1601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 09:46:35 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000000) 09:46:35 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) 09:46:35 executing program 3: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x3f, 0xd8600) read$hidraw(r0, 0x0, 0x0) [ 453.642809][ T1601] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 453.650814][ T1601] 09:46:35 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) (async) 09:46:35 executing program 3: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x3f, 0xd8600) read$hidraw(r0, 0x0, 0x0) 09:46:35 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000000) 09:46:35 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 10) 09:46:35 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:35 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) 09:46:35 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x6, &(0x7f0000000e00)) 09:46:35 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000000) 09:46:35 executing program 3: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x3f, 0xd8600) read$hidraw(r0, 0x0, 0x0) (async) read$hidraw(r0, 0x0, 0x0) 09:46:35 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x81000) 09:46:35 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)=0xffffffffffffffff) 09:46:35 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) [ 454.000829][ T1645] FAULT_INJECTION: forcing a failure. [ 454.000829][ T1645] name failslab, interval 1, probability 0, space 0, times 0 [ 454.035680][ T1645] CPU: 1 PID: 1645 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 09:46:35 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)=0xffffffffffffffff) [ 454.045898][ T1645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 454.056120][ T1645] Call Trace: [ 454.059682][ T1645] [ 454.062644][ T1645] dump_stack_lvl+0x125/0x1b0 [ 454.067715][ T1645] should_fail_ex+0x496/0x5b0 [ 454.072444][ T1645] should_failslab+0x9/0x20 [ 454.076991][ T1645] __kmem_cache_alloc_node+0x5f/0x470 [ 454.082406][ T1645] kmalloc_trace+0x25/0xe0 [ 454.086869][ T1645] nfc_allocate_device+0x15b/0x5e0 [ 454.092127][ T1645] ? __init_swait_queue_head+0xca/0x150 [ 454.097713][ T1645] nci_allocate_device+0x23b/0x430 [ 454.102869][ T1645] virtual_ncidev_open+0x6f/0x220 [ 454.107946][ T1645] ? virtual_ncidev_read+0x4e0/0x4e0 [ 454.113276][ T1645] misc_open+0x3da/0x4c0 [ 454.117559][ T1645] ? misc_devnode+0x120/0x120 [ 454.122309][ T1645] chrdev_open+0x277/0x700 [ 454.126761][ T1645] ? __unregister_chrdev+0x100/0x100 [ 454.132172][ T1645] ? fsnotify_perm.part.0+0x25d/0x630 [ 454.137588][ T1645] ? fsnotify_perm.part.0+0x268/0x630 [ 454.143014][ T1645] do_dentry_open+0x88b/0x1730 [ 454.147812][ T1645] ? __unregister_chrdev+0x100/0x100 09:46:35 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)=0xffffffffffffffff) 09:46:35 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x7, &(0x7f0000000e00)) [ 454.153132][ T1645] ? may_open+0x1f2/0x400 [ 454.157507][ T1645] path_openat+0x19af/0x29c0 [ 454.162136][ T1645] ? path_lookupat+0x770/0x770 [ 454.166942][ T1645] do_filp_open+0x1de/0x430 [ 454.171478][ T1645] ? may_open_dev+0xf0/0xf0 [ 454.176015][ T1645] ? expand_files+0x442/0x910 [ 454.180736][ T1645] ? _raw_spin_unlock+0x28/0x40 [ 454.185630][ T1645] ? alloc_fd+0x2da/0x6c0 [ 454.189998][ T1645] do_sys_openat2+0x176/0x1e0 [ 454.194714][ T1645] ? build_open_flags+0x690/0x690 [ 454.199777][ T1645] __x64_sys_openat+0x175/0x210 [ 454.204661][ T1645] ? __ia32_sys_open+0x1e0/0x1e0 [ 454.209647][ T1645] ? ksys_write+0x1a7/0x250 [ 454.214192][ T1645] ? rcu_is_watching+0x12/0xb0 [ 454.218992][ T1645] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 454.225009][ T1645] do_syscall_64+0x38/0xb0 [ 454.229465][ T1645] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 454.235838][ T1645] RIP: 0033:0x7fafba27cae9 [ 454.240364][ T1645] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 454.260179][ T1645] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 454.268627][ T1645] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 454.276625][ T1645] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 454.284626][ T1645] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 454.292711][ T1645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.300709][ T1645] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 454.308714][ T1645] 09:46:36 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 11) 09:46:36 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x81000) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x81000) (async) 09:46:36 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x3f, "14f65e37650c2838ff54579c938e2759f86b08f409e4403a3e8c4be0993a714cc8b62068737506305efe904ce824fefc381e93c7d3fddf0db8a7c2b5abb1e860"}) 09:46:36 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="43fa9a10496310ffffed00bb49e312f1da03d0ad0d75c5", @ANYRES16=0x0, @ANYBLOB="08002abd7000fddbdf2514000000180001801400020070696d72656700"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000ffdbdf252700000005002e004000000005002e000800000008002c000900000005002e00020000000c002d000200aaaaaaaaaaaa"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xc005) 09:46:36 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x3f, "14f65e37650c2838ff54579c938e2759f86b08f409e4403a3e8c4be0993a714cc8b62068737506305efe904ce824fefc381e93c7d3fddf0db8a7c2b5abb1e860"}) (rerun: 32) 09:46:36 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (async) 09:46:36 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x81000) 09:46:36 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="43fa9a10496310ffffed00bb49e312f1da03d0ad0d75c5", @ANYRES16=0x0, @ANYBLOB="08002abd7000fddbdf2514000000180001801400020070696d72656700"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000ffdbdf252700000005002e004000000005002e000800000008002c000900000005002e00020000000c002d000200aaaaaaaaaaaa"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xc005) 09:46:36 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x10, &(0x7f0000000e00)) [ 454.548555][ T1686] FAULT_INJECTION: forcing a failure. [ 454.548555][ T1686] name failslab, interval 1, probability 0, space 0, times 0 09:46:36 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x3f, "14f65e37650c2838ff54579c938e2759f86b08f409e4403a3e8c4be0993a714cc8b62068737506305efe904ce824fefc381e93c7d3fddf0db8a7c2b5abb1e860"}) (async) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x3f, "14f65e37650c2838ff54579c938e2759f86b08f409e4403a3e8c4be0993a714cc8b62068737506305efe904ce824fefc381e93c7d3fddf0db8a7c2b5abb1e860"}) 09:46:36 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) 09:46:36 executing program 3: socket$isdn(0x22, 0x3, 0x10) [ 454.655056][ T1686] CPU: 1 PID: 1686 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 454.665099][ T1686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 454.675270][ T1686] Call Trace: [ 454.678584][ T1686] [ 454.681536][ T1686] dump_stack_lvl+0x125/0x1b0 [ 454.686266][ T1686] should_fail_ex+0x496/0x5b0 [ 454.690998][ T1686] should_failslab+0x9/0x20 [ 454.695725][ T1686] __kmem_cache_alloc_node+0x5f/0x470 [ 454.701325][ T1686] ? __raw_spin_lock_init+0x3a/0x110 [ 454.706774][ T1686] kmalloc_trace+0x25/0xe0 [ 454.711237][ T1686] nci_hci_allocate+0x45/0x330 [ 454.716216][ T1686] nci_allocate_device+0x26f/0x430 [ 454.721363][ T1686] virtual_ncidev_open+0x6f/0x220 [ 454.726418][ T1686] ? virtual_ncidev_read+0x4e0/0x4e0 [ 454.731718][ T1686] misc_open+0x3da/0x4c0 [ 454.735968][ T1686] ? misc_devnode+0x120/0x120 [ 454.740644][ T1686] chrdev_open+0x277/0x700 [ 454.745065][ T1686] ? __unregister_chrdev+0x100/0x100 [ 454.750353][ T1686] ? fsnotify_perm.part.0+0x25d/0x630 [ 454.755822][ T1686] ? fsnotify_perm.part.0+0x268/0x630 [ 454.761204][ T1686] do_dentry_open+0x88b/0x1730 [ 454.765974][ T1686] ? __unregister_chrdev+0x100/0x100 [ 454.771265][ T1686] ? may_open+0x1f2/0x400 [ 454.775607][ T1686] path_openat+0x19af/0x29c0 [ 454.780200][ T1686] ? path_lookupat+0x770/0x770 [ 454.784992][ T1686] do_filp_open+0x1de/0x430 [ 454.789497][ T1686] ? may_open_dev+0xf0/0xf0 [ 454.794092][ T1686] ? expand_files+0x442/0x910 [ 454.798776][ T1686] ? _raw_spin_unlock+0x28/0x40 [ 454.803634][ T1686] ? alloc_fd+0x2da/0x6c0 [ 454.807964][ T1686] do_sys_openat2+0x176/0x1e0 [ 454.812645][ T1686] ? build_open_flags+0x690/0x690 [ 454.817778][ T1686] __x64_sys_openat+0x175/0x210 [ 454.822739][ T1686] ? __ia32_sys_open+0x1e0/0x1e0 [ 454.827722][ T1686] ? ksys_write+0x1a7/0x250 [ 454.832254][ T1686] ? rcu_is_watching+0x12/0xb0 [ 454.837636][ T1686] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 454.843623][ T1686] do_syscall_64+0x38/0xb0 [ 454.848141][ T1686] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 454.854046][ T1686] RIP: 0033:0x7fafba27cae9 [ 454.858456][ T1686] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 454.878253][ T1686] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 454.886860][ T1686] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 454.894838][ T1686] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 454.902826][ T1686] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 454.910998][ T1686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.918975][ T1686] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 454.926959][ T1686] 09:46:36 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 12) 09:46:36 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="43fa9a10496310ffffed00bb49e312f1da03d0ad0d75c5", @ANYRES16=0x0, @ANYBLOB="08002abd7000fddbdf2514000000180001801400020070696d72656700"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000ffdbdf252700000005002e004000000005002e000800000008002c000900000005002e00020000000c002d000200aaaaaaaaaaaa"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xc005) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="43fa9a10496310ffffed00bb49e312f1da03d0ad0d75c5", @ANYRES16=0x0, @ANYBLOB="08002abd7000fddbdf2514000000180001801400020070696d72656700"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000ffdbdf252700000005002e004000000005002e000800000008002c000900000005002e00020000000c002d000200aaaaaaaaaaaa"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xc005) (async) 09:46:36 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:36 executing program 3: socket$isdn(0x22, 0x3, 0x10) 09:46:36 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) 09:46:36 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) 09:46:36 executing program 3: socket$isdn(0x22, 0x3, 0x10) 09:46:36 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x300, &(0x7f0000000e00)) 09:46:36 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (async) 09:46:36 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) ioctl$TIOCCBRK(r0, 0x5428) socket(0x6, 0x804, 0x101) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0xf8, 0x3, 0x4bd, 0x9, 0x4}) 09:46:37 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x6) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) 09:46:37 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_open_dev$vcsu(&(0x7f0000000040), 0xffffffffffffffff, 0x105100) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) syz_open_pts(r1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r2, 0x4b36) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r3, 0x4b36) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000140)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r4, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r4, 0x80304d65, &(0x7f0000000100)) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r6, 0x4b36) ioctl$HIDIOCGFIELDINFO(r6, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r6}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000ce, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) syz_open_pts(r5, 0x0) r7 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xffffffffffff460e, 0x600) read$hidraw(r7, 0x0, 0x0) [ 454.963312][ T1691] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 455.238464][ T27] audit: type=1400 audit(1693734397.020:141): avc: denied { create } for pid=1726 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 455.271444][ T1732] FAULT_INJECTION: forcing a failure. [ 455.271444][ T1732] name failslab, interval 1, probability 0, space 0, times 0 [ 455.284431][ T1732] CPU: 0 PID: 1732 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 455.294446][ T1732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 455.304529][ T1732] Call Trace: [ 455.307829][ T1732] [ 455.310776][ T1732] dump_stack_lvl+0x125/0x1b0 [ 455.315499][ T1732] should_fail_ex+0x496/0x5b0 [ 455.320222][ T1732] should_failslab+0x9/0x20 [ 455.324767][ T1732] __kmem_cache_alloc_node+0x5f/0x470 [ 455.330268][ T1732] kmalloc_trace+0x25/0xe0 [ 455.334737][ T1732] alloc_workqueue+0x16f/0x1490 [ 455.339666][ T1732] ? lock_sync+0x190/0x190 [ 455.344132][ T1732] ? workqueue_sysfs_register+0x400/0x400 [ 455.350219][ T1732] ? rcu_is_watching+0x12/0xb0 [ 455.355024][ T1732] nci_register_device+0x221/0xb80 [ 455.360159][ T1732] ? nci_init_complete_req+0x410/0x410 [ 455.365633][ T1732] ? lockdep_init_map_type+0x16d/0x7c0 [ 455.371196][ T1732] virtual_ncidev_open+0x147/0x220 [ 455.376326][ T1732] ? virtual_ncidev_read+0x4e0/0x4e0 [ 455.381630][ T1732] misc_open+0x3da/0x4c0 [ 455.385977][ T1732] ? misc_devnode+0x120/0x120 [ 455.390658][ T1732] chrdev_open+0x277/0x700 [ 455.395079][ T1732] ? __unregister_chrdev+0x100/0x100 [ 455.400369][ T1732] ? fsnotify_perm.part.0+0x25d/0x630 [ 455.405753][ T1732] ? fsnotify_perm.part.0+0x268/0x630 [ 455.411136][ T1732] do_dentry_open+0x88b/0x1730 [ 455.415904][ T1732] ? __unregister_chrdev+0x100/0x100 [ 455.421192][ T1732] ? may_open+0x1f2/0x400 [ 455.425560][ T1732] path_openat+0x19af/0x29c0 [ 455.430174][ T1732] ? path_lookupat+0x770/0x770 [ 455.434966][ T1732] do_filp_open+0x1de/0x430 [ 455.439474][ T1732] ? may_open_dev+0xf0/0xf0 [ 455.443979][ T1732] ? expand_files+0x442/0x910 [ 455.448669][ T1732] ? _raw_spin_unlock+0x28/0x40 [ 455.453534][ T1732] ? alloc_fd+0x2da/0x6c0 [ 455.458053][ T1732] do_sys_openat2+0x176/0x1e0 [ 455.462830][ T1732] ? build_open_flags+0x690/0x690 [ 455.467863][ T1732] __x64_sys_openat+0x175/0x210 [ 455.472742][ T1732] ? __ia32_sys_open+0x1e0/0x1e0 [ 455.477699][ T1732] ? ksys_write+0x1a7/0x250 [ 455.482232][ T1732] ? rcu_is_watching+0x12/0xb0 [ 455.487037][ T1732] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 455.493038][ T1732] do_syscall_64+0x38/0xb0 [ 455.497470][ T1732] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 455.503376][ T1732] RIP: 0033:0x7fafba27cae9 [ 455.507792][ T1732] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 455.527418][ T1732] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 455.535855][ T1732] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 455.543941][ T1732] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 455.551918][ T1732] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 455.559888][ T1732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 455.567944][ T1732] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 455.576009][ T1732] 09:46:37 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 13) 09:46:37 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x500, &(0x7f0000000e00)) 09:46:37 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) (async) ioctl$TIOCCBRK(r0, 0x5428) socket(0x6, 0x804, 0x101) (async) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0xf8, 0x3, 0x4bd, 0x9, 0x4}) 09:46:37 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0xffffffffffffffff, 0x105100) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) syz_open_pts(r1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r2, 0x4b36) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r3, 0x4b36) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000140)) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r4, 0x0) (async) ioctl$SOUND_OLD_MIXER_INFO(r4, 0x80304d65, &(0x7f0000000100)) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r6, 0x4b36) ioctl$HIDIOCGFIELDINFO(r6, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r6}, 0x8) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000ce, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async, rerun: 64) syz_open_pts(r5, 0x0) (async) r7 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xffffffffffff460e, 0x600) read$hidraw(r7, 0x0, 0x0) 09:46:37 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) [ 455.657292][ T27] audit: type=1400 audit(1693734397.450:142): avc: denied { rename } for pid=4463 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 09:46:37 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r1, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x6) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) [ 455.732331][ T27] audit: type=1400 audit(1693734397.470:143): avc: denied { unlink } for pid=4463 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 09:46:37 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0xffffffffffffffff, 0x105100) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) syz_open_pts(r1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r2, 0x4b36) (async, rerun: 64) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 64) ioctl$KDENABIO(r3, 0x4b36) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000140)) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r4, 0x0) (async) ioctl$SOUND_OLD_MIXER_INFO(r4, 0x80304d65, &(0x7f0000000100)) (async) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) (async, rerun: 32) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 32) ioctl$KDENABIO(r6, 0x4b36) (async, rerun: 32) ioctl$HIDIOCGFIELDINFO(r6, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (rerun: 32) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000140)) (async, rerun: 64) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r6}, 0x8) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000ce, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) syz_open_pts(r5, 0x0) r7 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xffffffffffff460e, 0x600) read$hidraw(r7, 0x0, 0x0) 09:46:37 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x600, &(0x7f0000000e00)) [ 455.774590][ T1764] FAULT_INJECTION: forcing a failure. [ 455.774590][ T1764] name failslab, interval 1, probability 0, space 0, times 0 [ 455.827552][ T1764] CPU: 1 PID: 1764 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 455.834763][ T27] audit: type=1400 audit(1693734397.470:144): avc: denied { create } for pid=4463 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 455.837657][ T1764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 455.837673][ T1764] Call Trace: [ 455.837683][ T1764] [ 455.837692][ T1764] dump_stack_lvl+0x125/0x1b0 [ 455.879286][ T1764] should_fail_ex+0x496/0x5b0 [ 455.883985][ T1764] should_failslab+0x9/0x20 [ 455.888498][ T1764] __kmem_cache_alloc_node+0x5f/0x470 [ 455.893882][ T1764] ? __raw_spin_lock_init+0x3a/0x110 [ 455.899182][ T1764] kmalloc_trace+0x25/0xe0 [ 455.903703][ T1764] nci_hci_allocate+0x45/0x330 [ 455.908489][ T1764] nci_allocate_device+0x26f/0x430 [ 455.913611][ T1764] virtual_ncidev_open+0x6f/0x220 [ 455.918678][ T1764] ? virtual_ncidev_read+0x4e0/0x4e0 [ 455.924001][ T1764] misc_open+0x3da/0x4c0 [ 455.928277][ T1764] ? misc_devnode+0x120/0x120 [ 455.932982][ T1764] chrdev_open+0x277/0x700 [ 455.937431][ T1764] ? __unregister_chrdev+0x100/0x100 [ 455.942749][ T1764] ? fsnotify_perm.part.0+0x25d/0x630 [ 455.948138][ T1764] ? fsnotify_perm.part.0+0x268/0x630 [ 455.953525][ T1764] do_dentry_open+0x88b/0x1730 [ 455.958295][ T1764] ? __unregister_chrdev+0x100/0x100 [ 455.963582][ T1764] ? may_open+0x1f2/0x400 [ 455.967921][ T1764] path_openat+0x19af/0x29c0 [ 455.972531][ T1764] ? path_lookupat+0x770/0x770 [ 455.977325][ T1764] do_filp_open+0x1de/0x430 [ 455.981875][ T1764] ? may_open_dev+0xf0/0xf0 [ 455.986431][ T1764] ? expand_files+0x442/0x910 [ 455.991134][ T1764] ? _raw_spin_unlock+0x28/0x40 [ 455.996009][ T1764] ? alloc_fd+0x2da/0x6c0 [ 456.000350][ T1764] do_sys_openat2+0x176/0x1e0 [ 456.005031][ T1764] ? build_open_flags+0x690/0x690 [ 456.010061][ T1764] __x64_sys_openat+0x175/0x210 [ 456.014915][ T1764] ? __ia32_sys_open+0x1e0/0x1e0 [ 456.019857][ T1764] ? ksys_write+0x1a7/0x250 [ 456.024366][ T1764] ? rcu_is_watching+0x12/0xb0 [ 456.029149][ T1764] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 456.035150][ T1764] do_syscall_64+0x38/0xb0 [ 456.039581][ T1764] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 456.045661][ T1764] RIP: 0033:0x7fafba27cae9 [ 456.050071][ T1764] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 456.069778][ T1764] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 456.078313][ T1764] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 456.086299][ T1764] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 456.094285][ T1764] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 456.102283][ T1764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.110264][ T1764] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 456.118242][ T1764] 09:46:38 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) ioctl$TIOCCBRK(r0, 0x5428) socket(0x6, 0x804, 0x101) (async) socket(0x6, 0x804, 0x101) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0xf8, 0x3, 0x4bd, 0x9, 0x4}) 09:46:38 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x6) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) (async) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) 09:46:38 executing program 3: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x20) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:38 executing program 3: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x20) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x20) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) 09:46:38 executing program 3: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x20) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x20) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:38 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x1, 0x80, 0x4}, 0x10) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x85400) inotify_rm_watch(r1, 0x0) 09:46:38 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x2140) 09:46:38 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:38 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 14) 09:46:38 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x700, &(0x7f0000000e00)) 09:46:38 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x2140) 09:46:38 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000)) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f00000000c0)}}, 0x10) syz_open_pts(r2, 0x0) read$hidraw(r2, 0x0, 0x0) 09:46:38 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x1, 0x80, 0x4}, 0x10) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x85400) inotify_rm_watch(r1, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x1, 0x80, 0x4}, 0x10) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x85400) (async) inotify_rm_watch(r1, 0x0) (async) 09:46:38 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:38 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x2140) 09:46:38 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x1, 0x80, 0x4}, 0x10) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x85400) inotify_rm_watch(r1, 0x0) (async) inotify_rm_watch(r1, 0x0) [ 456.552245][ T1815] FAULT_INJECTION: forcing a failure. [ 456.552245][ T1815] name failslab, interval 1, probability 0, space 0, times 0 [ 456.621604][ T1815] CPU: 0 PID: 1815 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 456.631819][ T1815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 456.641917][ T1815] Call Trace: [ 456.645758][ T1815] [ 456.648884][ T1815] dump_stack_lvl+0x125/0x1b0 [ 456.654128][ T1815] should_fail_ex+0x496/0x5b0 [ 456.658852][ T1815] ? kasprintf+0xc8/0x100 [ 456.663397][ T1815] ? kasprintf+0xc8/0x100 [ 456.667857][ T1815] should_failslab+0x9/0x20 [ 456.672403][ T1815] __kmem_cache_alloc_node+0x5f/0x470 [ 456.677840][ T1815] ? pointer+0xbf0/0xbf0 [ 456.682352][ T1815] ? kasprintf+0xc8/0x100 [ 456.686720][ T1815] __kmalloc_node_track_caller+0x50/0x100 [ 456.692486][ T1815] kvasprintf+0xbd/0x150 [ 456.696779][ T1815] ? bust_spinlocks+0xe0/0xe0 [ 456.701666][ T1815] ? ip6_addr_string_sa+0x820/0x820 [ 456.706903][ T1815] ? preempt_count_add+0x72/0x140 [ 456.711972][ T1815] kasprintf+0xc8/0x100 [ 456.716169][ T1815] ? kvasprintf_const+0x190/0x190 [ 456.721253][ T1815] ? free_zapped_rcu+0x290/0x290 [ 456.726247][ T1815] ? lockdep_init_map_type+0x16d/0x7c0 [ 456.732023][ T1815] alloc_workqueue+0x590/0x1490 [ 456.736918][ T1815] ? lock_sync+0x190/0x190 [ 456.741411][ T1815] ? workqueue_sysfs_register+0x400/0x400 [ 456.747349][ T1815] ? rcu_is_watching+0x12/0xb0 [ 456.752157][ T1815] nci_register_device+0x221/0xb80 [ 456.757832][ T1815] ? nci_init_complete_req+0x410/0x410 [ 456.763329][ T1815] ? lockdep_init_map_type+0x16d/0x7c0 [ 456.768835][ T1815] virtual_ncidev_open+0x147/0x220 [ 456.774000][ T1815] ? virtual_ncidev_read+0x4e0/0x4e0 [ 456.779328][ T1815] misc_open+0x3da/0x4c0 [ 456.783654][ T1815] ? misc_devnode+0x120/0x120 [ 456.788362][ T1815] chrdev_open+0x277/0x700 [ 456.792827][ T1815] ? __unregister_chrdev+0x100/0x100 [ 456.798146][ T1815] ? fsnotify_perm.part.0+0x25d/0x630 [ 456.803561][ T1815] ? fsnotify_perm.part.0+0x268/0x630 [ 456.808988][ T1815] do_dentry_open+0x88b/0x1730 [ 456.813786][ T1815] ? __unregister_chrdev+0x100/0x100 [ 456.819103][ T1815] ? may_open+0x1f2/0x400 [ 456.823480][ T1815] path_openat+0x19af/0x29c0 [ 456.828197][ T1815] ? path_lookupat+0x770/0x770 [ 456.833017][ T1815] do_filp_open+0x1de/0x430 [ 456.837548][ T1815] ? may_open_dev+0xf0/0xf0 [ 456.842085][ T1815] ? expand_files+0x442/0x910 [ 456.846804][ T1815] ? _raw_spin_unlock+0x28/0x40 [ 456.851694][ T1815] ? alloc_fd+0x2da/0x6c0 [ 456.856064][ T1815] do_sys_openat2+0x176/0x1e0 [ 456.860779][ T1815] ? build_open_flags+0x690/0x690 [ 456.865857][ T1815] __x64_sys_openat+0x175/0x210 [ 456.870744][ T1815] ? __ia32_sys_open+0x1e0/0x1e0 [ 456.875738][ T1815] ? ksys_write+0x1a7/0x250 [ 456.880285][ T1815] ? rcu_is_watching+0x12/0xb0 [ 456.885085][ T1815] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 456.892432][ T1815] do_syscall_64+0x38/0xb0 [ 456.896894][ T1815] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 456.902832][ T1815] RIP: 0033:0x7fafba27cae9 [ 456.907269][ T1815] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 456.926908][ T1815] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 456.935347][ T1815] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 456.943351][ T1815] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 456.951558][ T1815] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 456.959650][ T1815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.967660][ T1815] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 456.975669][ T1815] 09:46:38 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000)) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f00000000c0)}}, 0x10) syz_open_pts(r2, 0x0) read$hidraw(r2, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r0, 0x4b36) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCMBIS(r1, 0x5416, 0x0) (async) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000)) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f00000000c0)}}, 0x10) (async) syz_open_pts(r2, 0x0) (async) read$hidraw(r2, 0x0, 0x0) (async) 09:46:38 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x1b54, &(0x7f0000000e00)) 09:46:38 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:38 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) 09:46:38 executing program 4: sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x4, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8001}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0xe8d5c9b91cd9e907}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x68a7e334}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b698cb1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0xbc}}, 0x4000) 09:46:38 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 15) 09:46:38 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000)) (async) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000)) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f00000000c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f00000000c0)}}, 0x10) syz_open_pts(r2, 0x0) read$hidraw(r2, 0x0, 0x0) 09:46:38 executing program 4: sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x4, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8001}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0xe8d5c9b91cd9e907}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x68a7e334}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b698cb1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0xbc}}, 0x4000) 09:46:38 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) 09:46:39 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x2154, &(0x7f0000000e00)) 09:46:39 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) (async, rerun: 64) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async, rerun: 64) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) 09:46:39 executing program 4: sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x4, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8001}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0xe8d5c9b91cd9e907}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x68a7e334}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b698cb1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0xbc}}, 0x4000) 09:46:39 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x707, 0x0, 0x8, 0x819, {{0x48, 0x4, 0x3, 0x13, 0x120, 0x65, 0x0, 0x40, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x4d, 0x3, [{0x0, 0x4, "c121"}, {0x2, 0x5, "81f54b"}, {0x2, 0x11, "4094a38914d93cc074a6702876a56c"}, {0x2, 0xa, "74cef3339d3236dd"}, {0x7, 0x5, "a87625"}, {0x2, 0xd, "9218ab9b839b22d57d81c1"}, {0x5, 0xd, "b3f018d6f4f343471c3864"}, {0x1, 0x4, "dd3a"}]}, @timestamp_prespec={0x44, 0x24, 0xf3, 0x3, 0xd, [{@multicast2, 0x401}, {@remote}, {@rand_addr=0x64010102, 0x4}, {@empty, 0xfffffff8}]}, @timestamp_prespec={0x44, 0x4c, 0x4f, 0x3, 0x1, [{@local, 0xf359}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@remote, 0x6}, {@local, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x95e}, {@multicast2, 0x9}]}, @timestamp={0x44, 0x14, 0x8b, 0x0, 0x2, [0xfff, 0x3, 0x4, 0x3]}, @cipso={0x86, 0x39, 0x3, [{0x0, 0xb, "6925a6038f96e9efd5"}, {0x5, 0xa, "a91b76de331b2d11"}, {0x2, 0x5, "668f70"}, {0x1, 0xd, "274c6726d8cbcc278c6b90"}, {0x0, 0xa, "7ab134127ff5f6c1"}, {0x0, 0x2}]}]}}}}}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:39 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:39 executing program 5: arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000100)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x7fffffff}, 0x8) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdc00, {}, [@NL802154_ATTR_CCA_OPT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2001c008}, 0x4004) 09:46:39 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x2040) 09:46:39 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) [ 457.452189][ T1858] FAULT_INJECTION: forcing a failure. [ 457.452189][ T1858] name failslab, interval 1, probability 0, space 0, times 0 [ 457.470006][ T1858] CPU: 0 PID: 1858 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 457.480388][ T1858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 457.490471][ T1858] Call Trace: [ 457.493866][ T1858] [ 457.496817][ T1858] dump_stack_lvl+0x125/0x1b0 [ 457.501540][ T1858] should_fail_ex+0x496/0x5b0 [ 457.506349][ T1858] should_failslab+0x9/0x20 [ 457.510894][ T1858] __kmem_cache_alloc_node+0x5f/0x470 [ 457.516565][ T1858] kmalloc_trace+0x25/0xe0 [ 457.521034][ T1858] alloc_workqueue+0x1d4/0x1490 [ 457.525929][ T1858] ? lock_sync+0x190/0x190 [ 457.530394][ T1858] ? workqueue_sysfs_register+0x400/0x400 [ 457.536428][ T1858] ? rcu_is_watching+0x12/0xb0 [ 457.541225][ T1858] nci_register_device+0x221/0xb80 [ 457.546380][ T1858] ? nci_init_complete_req+0x410/0x410 [ 457.551880][ T1858] ? lockdep_init_map_type+0x16d/0x7c0 [ 457.557386][ T1858] virtual_ncidev_open+0x147/0x220 [ 457.562567][ T1858] ? virtual_ncidev_read+0x4e0/0x4e0 [ 457.567901][ T1858] misc_open+0x3da/0x4c0 [ 457.572266][ T1858] ? misc_devnode+0x120/0x120 [ 457.577154][ T1858] chrdev_open+0x277/0x700 [ 457.581608][ T1858] ? __unregister_chrdev+0x100/0x100 [ 457.586925][ T1858] ? fsnotify_perm.part.0+0x25d/0x630 [ 457.592339][ T1858] ? fsnotify_perm.part.0+0x268/0x630 [ 457.597758][ T1858] do_dentry_open+0x88b/0x1730 [ 457.602557][ T1858] ? __unregister_chrdev+0x100/0x100 [ 457.607908][ T1858] ? may_open+0x1f2/0x400 [ 457.612281][ T1858] path_openat+0x19af/0x29c0 [ 457.616904][ T1858] ? path_lookupat+0x770/0x770 [ 457.621710][ T1858] do_filp_open+0x1de/0x430 [ 457.626242][ T1858] ? may_open_dev+0xf0/0xf0 [ 457.630778][ T1858] ? expand_files+0x442/0x910 [ 457.635590][ T1858] ? _raw_spin_unlock+0x28/0x40 [ 457.640476][ T1858] ? alloc_fd+0x2da/0x6c0 [ 457.644845][ T1858] do_sys_openat2+0x176/0x1e0 [ 457.649535][ T1858] ? build_open_flags+0x690/0x690 [ 457.654564][ T1858] __x64_sys_openat+0x175/0x210 [ 457.659423][ T1858] ? __ia32_sys_open+0x1e0/0x1e0 [ 457.664365][ T1858] ? ksys_write+0x1a7/0x250 [ 457.668878][ T1858] ? rcu_is_watching+0x12/0xb0 [ 457.673640][ T1858] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 457.679643][ T1858] do_syscall_64+0x38/0xb0 [ 457.684072][ T1858] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 457.689978][ T1858] RIP: 0033:0x7fafba27cae9 [ 457.694393][ T1858] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 457.714524][ T1858] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 457.722944][ T1858] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 457.730923][ T1858] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 457.738980][ T1858] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 457.746951][ T1858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 457.755007][ T1858] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 457.762982][ T1858] 09:46:39 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 16) 09:46:39 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x3389, &(0x7f0000000e00)) 09:46:39 executing program 5: arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000100)) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x7fffffff}, 0x8) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdc00, {}, [@NL802154_ATTR_CCA_OPT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2001c008}, 0x4004) 09:46:39 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r2, 0x0) (async) syz_open_pts(r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x707, 0x0, 0x8, 0x819, {{0x48, 0x4, 0x3, 0x13, 0x120, 0x65, 0x0, 0x40, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x4d, 0x3, [{0x0, 0x4, "c121"}, {0x2, 0x5, "81f54b"}, {0x2, 0x11, "4094a38914d93cc074a6702876a56c"}, {0x2, 0xa, "74cef3339d3236dd"}, {0x7, 0x5, "a87625"}, {0x2, 0xd, "9218ab9b839b22d57d81c1"}, {0x5, 0xd, "b3f018d6f4f343471c3864"}, {0x1, 0x4, "dd3a"}]}, @timestamp_prespec={0x44, 0x24, 0xf3, 0x3, 0xd, [{@multicast2, 0x401}, {@remote}, {@rand_addr=0x64010102, 0x4}, {@empty, 0xfffffff8}]}, @timestamp_prespec={0x44, 0x4c, 0x4f, 0x3, 0x1, [{@local, 0xf359}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@remote, 0x6}, {@local, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x95e}, {@multicast2, 0x9}]}, @timestamp={0x44, 0x14, 0x8b, 0x0, 0x2, [0xfff, 0x3, 0x4, 0x3]}, @cipso={0x86, 0x39, 0x3, [{0x0, 0xb, "6925a6038f96e9efd5"}, {0x5, 0xa, "a91b76de331b2d11"}, {0x2, 0x5, "668f70"}, {0x1, 0xd, "274c6726d8cbcc278c6b90"}, {0x0, 0xa, "7ab134127ff5f6c1"}, {0x0, 0x2}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x707, 0x0, 0x8, 0x819, {{0x48, 0x4, 0x3, 0x13, 0x120, 0x65, 0x0, 0x40, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x4d, 0x3, [{0x0, 0x4, "c121"}, {0x2, 0x5, "81f54b"}, {0x2, 0x11, "4094a38914d93cc074a6702876a56c"}, {0x2, 0xa, "74cef3339d3236dd"}, {0x7, 0x5, "a87625"}, {0x2, 0xd, "9218ab9b839b22d57d81c1"}, {0x5, 0xd, "b3f018d6f4f343471c3864"}, {0x1, 0x4, "dd3a"}]}, @timestamp_prespec={0x44, 0x24, 0xf3, 0x3, 0xd, [{@multicast2, 0x401}, {@remote}, {@rand_addr=0x64010102, 0x4}, {@empty, 0xfffffff8}]}, @timestamp_prespec={0x44, 0x4c, 0x4f, 0x3, 0x1, [{@local, 0xf359}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@remote, 0x6}, {@local, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x95e}, {@multicast2, 0x9}]}, @timestamp={0x44, 0x14, 0x8b, 0x0, 0x2, [0xfff, 0x3, 0x4, 0x3]}, @cipso={0x86, 0x39, 0x3, [{0x0, 0xb, "6925a6038f96e9efd5"}, {0x5, 0xa, "a91b76de331b2d11"}, {0x2, 0x5, "668f70"}, {0x1, 0xd, "274c6726d8cbcc278c6b90"}, {0x0, 0xa, "7ab134127ff5f6c1"}, {0x0, 0x2}]}]}}}}}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:39 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:39 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x2040) 09:46:39 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000001c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$VT_RESIZEX(r3, 0x560a, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x6) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) read$hidraw(r4, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) 09:46:39 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x2040) 09:46:39 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x707, 0x0, 0x8, 0x819, {{0x48, 0x4, 0x3, 0x13, 0x120, 0x65, 0x0, 0x40, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x4d, 0x3, [{0x0, 0x4, "c121"}, {0x2, 0x5, "81f54b"}, {0x2, 0x11, "4094a38914d93cc074a6702876a56c"}, {0x2, 0xa, "74cef3339d3236dd"}, {0x7, 0x5, "a87625"}, {0x2, 0xd, "9218ab9b839b22d57d81c1"}, {0x5, 0xd, "b3f018d6f4f343471c3864"}, {0x1, 0x4, "dd3a"}]}, @timestamp_prespec={0x44, 0x24, 0xf3, 0x3, 0xd, [{@multicast2, 0x401}, {@remote}, {@rand_addr=0x64010102, 0x4}, {@empty, 0xfffffff8}]}, @timestamp_prespec={0x44, 0x4c, 0x4f, 0x3, 0x1, [{@local, 0xf359}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@remote, 0x6}, {@local, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x95e}, {@multicast2, 0x9}]}, @timestamp={0x44, 0x14, 0x8b, 0x0, 0x2, [0xfff, 0x3, 0x4, 0x3]}, @cipso={0x86, 0x39, 0x3, [{0x0, 0xb, "6925a6038f96e9efd5"}, {0x5, 0xa, "a91b76de331b2d11"}, {0x2, 0x5, "668f70"}, {0x1, 0xd, "274c6726d8cbcc278c6b90"}, {0x0, 0xa, "7ab134127ff5f6c1"}, {0x0, 0x2}]}]}}}}}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x707, 0x0, 0x8, 0x819, {{0x48, 0x4, 0x3, 0x13, 0x120, 0x65, 0x0, 0x40, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x4d, 0x3, [{0x0, 0x4, "c121"}, {0x2, 0x5, "81f54b"}, {0x2, 0x11, "4094a38914d93cc074a6702876a56c"}, {0x2, 0xa, "74cef3339d3236dd"}, {0x7, 0x5, "a87625"}, {0x2, 0xd, "9218ab9b839b22d57d81c1"}, {0x5, 0xd, "b3f018d6f4f343471c3864"}, {0x1, 0x4, "dd3a"}]}, @timestamp_prespec={0x44, 0x24, 0xf3, 0x3, 0xd, [{@multicast2, 0x401}, {@remote}, {@rand_addr=0x64010102, 0x4}, {@empty, 0xfffffff8}]}, @timestamp_prespec={0x44, 0x4c, 0x4f, 0x3, 0x1, [{@local, 0xf359}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@remote, 0x6}, {@local, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x95e}, {@multicast2, 0x9}]}, @timestamp={0x44, 0x14, 0x8b, 0x0, 0x2, [0xfff, 0x3, 0x4, 0x3]}, @cipso={0x86, 0x39, 0x3, [{0x0, 0xb, "6925a6038f96e9efd5"}, {0x5, 0xa, "a91b76de331b2d11"}, {0x2, 0x5, "668f70"}, {0x1, 0xd, "274c6726d8cbcc278c6b90"}, {0x0, 0xa, "7ab134127ff5f6c1"}, {0x0, 0x2}]}]}}}}}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (async) 09:46:39 executing program 5: arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000100)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x7fffffff}, 0x8) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdc00, {}, [@NL802154_ATTR_CCA_OPT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2001c008}, 0x4004) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000100)) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x7fffffff}, 0x8) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdc00, {}, [@NL802154_ATTR_CCA_OPT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2001c008}, 0x4004) (async) 09:46:39 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000001c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$VT_RESIZEX(r3, 0x560a, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x6) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) read$hidraw(r4, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCMBIS(r2, 0x5416, 0x0) (async) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000001c0)) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) (async) syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r3, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r3, 0x560a, 0x0) (async) ioctl$KDSKBLED(r3, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) (async) read$hidraw(r4, 0x0, 0x0) (async) prctl$PR_GET_FP_MODE(0x2e) (async) 09:46:39 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') [ 458.070614][ T1916] FAULT_INJECTION: forcing a failure. [ 458.070614][ T1916] name failslab, interval 1, probability 0, space 0, times 0 [ 458.127012][ T1916] CPU: 0 PID: 1916 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 458.137055][ T1916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 458.147141][ T1916] Call Trace: [ 458.150471][ T1916] [ 458.153424][ T1916] dump_stack_lvl+0x125/0x1b0 [ 458.158148][ T1916] should_fail_ex+0x496/0x5b0 [ 458.162878][ T1916] ? kasprintf+0xc8/0x100 [ 458.167257][ T1916] ? kasprintf+0xc8/0x100 [ 458.171630][ T1916] should_failslab+0x9/0x20 [ 458.176189][ T1916] __kmem_cache_alloc_node+0x5f/0x470 [ 458.182308][ T1916] ? pointer+0xbf0/0xbf0 [ 458.186622][ T1916] ? kasprintf+0xc8/0x100 [ 458.190971][ T1916] __kmalloc_node_track_caller+0x50/0x100 [ 458.196714][ T1916] kvasprintf+0xbd/0x150 [ 458.200964][ T1916] ? bust_spinlocks+0xe0/0xe0 [ 458.206172][ T1916] ? ip6_addr_string_sa+0x820/0x820 [ 458.211386][ T1916] ? preempt_count_add+0x72/0x140 [ 458.216426][ T1916] kasprintf+0xc8/0x100 [ 458.220595][ T1916] ? kvasprintf_const+0x190/0x190 [ 458.225626][ T1916] ? free_zapped_rcu+0x290/0x290 [ 458.230600][ T1916] ? lockdep_init_map_type+0x16d/0x7c0 [ 458.236154][ T1916] alloc_workqueue+0x590/0x1490 [ 458.241019][ T1916] ? lock_sync+0x190/0x190 [ 458.245446][ T1916] ? workqueue_sysfs_register+0x400/0x400 [ 458.251263][ T1916] ? rcu_is_watching+0x12/0xb0 [ 458.256040][ T1916] nci_register_device+0x221/0xb80 [ 458.261165][ T1916] ? nci_init_complete_req+0x410/0x410 [ 458.266648][ T1916] ? lockdep_init_map_type+0x16d/0x7c0 [ 458.272130][ T1916] virtual_ncidev_open+0x147/0x220 [ 458.277291][ T1916] ? virtual_ncidev_read+0x4e0/0x4e0 [ 458.282603][ T1916] misc_open+0x3da/0x4c0 [ 458.286860][ T1916] ? misc_devnode+0x120/0x120 [ 458.291644][ T1916] chrdev_open+0x277/0x700 [ 458.296082][ T1916] ? __unregister_chrdev+0x100/0x100 [ 458.301377][ T1916] ? fsnotify_perm.part.0+0x25d/0x630 [ 458.306766][ T1916] ? fsnotify_perm.part.0+0x268/0x630 [ 458.312149][ T1916] do_dentry_open+0x88b/0x1730 [ 458.317177][ T1916] ? __unregister_chrdev+0x100/0x100 [ 458.322470][ T1916] ? may_open+0x1f2/0x400 [ 458.326987][ T1916] path_openat+0x19af/0x29c0 [ 458.331583][ T1916] ? path_lookupat+0x770/0x770 [ 458.336630][ T1916] do_filp_open+0x1de/0x430 [ 458.341169][ T1916] ? may_open_dev+0xf0/0xf0 [ 458.345704][ T1916] ? expand_files+0x442/0x910 [ 458.350591][ T1916] ? _raw_spin_unlock+0x28/0x40 [ 458.355744][ T1916] ? alloc_fd+0x2da/0x6c0 [ 458.360270][ T1916] do_sys_openat2+0x176/0x1e0 [ 458.364957][ T1916] ? build_open_flags+0x690/0x690 [ 458.370085][ T1916] __x64_sys_openat+0x175/0x210 [ 458.375211][ T1916] ? __ia32_sys_open+0x1e0/0x1e0 [ 458.380160][ T1916] ? ksys_write+0x1a7/0x250 [ 458.384673][ T1916] ? rcu_is_watching+0x12/0xb0 [ 458.389458][ T1916] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 458.395447][ T1916] do_syscall_64+0x38/0xb0 [ 458.399968][ T1916] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 458.405887][ T1916] RIP: 0033:0x7fafba27cae9 [ 458.410307][ T1916] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 458.430789][ T1916] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 458.439516][ T1916] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 458.447491][ T1916] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 458.455740][ T1916] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 458.463712][ T1916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 458.471771][ T1916] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 458.479759][ T1916] [ 458.676066][ T1920] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR 09:46:40 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 17) 09:46:40 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x474b, &(0x7f0000000e00)) 09:46:40 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x0, 0xffffffff, 0x4a, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x80, 0x1f, 0xfffffffc}}) connect$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0, 0x1, {0x2, 0x0, 0x2}, 0xfd}, 0x18) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000100)) 09:46:40 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') 09:46:40 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000001c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$VT_RESIZEX(r3, 0x560a, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x6) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) read$hidraw(r4, 0x0, 0x0) (async) read$hidraw(r4, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) 09:46:40 executing program 2: ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000040)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000100)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) sendto$phonet(r1, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000080)) 09:46:40 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x0, 0xffffffff, 0x4a, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x80, 0x1f, 0xfffffffc}}) connect$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0, 0x1, {0x2, 0x0, 0x2}, 0xfd}, 0x18) (async) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000100)) 09:46:40 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') 09:46:40 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) read$hidraw(r0, 0x0, 0x0) [ 458.676851][ T1926] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 458.981284][ T1954] FAULT_INJECTION: forcing a failure. [ 458.981284][ T1954] name failslab, interval 1, probability 0, space 0, times 0 [ 459.005826][ T1954] CPU: 0 PID: 1954 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 459.015947][ T1954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 459.026030][ T1954] Call Trace: 09:46:40 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x0, 0xffffffff, 0x4a, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x80, 0x1f, 0xfffffffc}}) connect$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0, 0x1, {0x2, 0x0, 0x2}, 0xfd}, 0x18) (async) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000100)) [ 459.029447][ T1954] [ 459.032489][ T1954] dump_stack_lvl+0x125/0x1b0 [ 459.037210][ T1954] should_fail_ex+0x496/0x5b0 [ 459.041941][ T1954] should_failslab+0x9/0x20 [ 459.046484][ T1954] __kmem_cache_alloc_node+0x5f/0x470 [ 459.051904][ T1954] kmalloc_trace+0x25/0xe0 [ 459.056366][ T1954] apply_wqattrs_prepare+0x137/0xa90 [ 459.061697][ T1954] ? preempt_count_sub+0x150/0x150 [ 459.066855][ T1954] apply_workqueue_attrs_locked+0xcb/0x150 [ 459.072885][ T1954] alloc_workqueue+0xc8b/0x1490 [ 459.077786][ T1954] ? workqueue_sysfs_register+0x400/0x400 [ 459.083553][ T1954] ? rcu_is_watching+0x12/0xb0 [ 459.088373][ T1954] nci_register_device+0x221/0xb80 [ 459.093618][ T1954] ? nci_init_complete_req+0x410/0x410 [ 459.099116][ T1954] ? lockdep_init_map_type+0x16d/0x7c0 [ 459.104615][ T1954] virtual_ncidev_open+0x147/0x220 [ 459.109865][ T1954] ? virtual_ncidev_read+0x4e0/0x4e0 [ 459.115206][ T1954] misc_open+0x3da/0x4c0 [ 459.119576][ T1954] ? misc_devnode+0x120/0x120 [ 459.124289][ T1954] chrdev_open+0x277/0x700 [ 459.128735][ T1954] ? __unregister_chrdev+0x100/0x100 [ 459.134058][ T1954] ? fsnotify_perm.part.0+0x25d/0x630 [ 459.139448][ T1954] ? fsnotify_perm.part.0+0x268/0x630 [ 459.144829][ T1954] do_dentry_open+0x88b/0x1730 [ 459.149608][ T1954] ? __unregister_chrdev+0x100/0x100 [ 459.155068][ T1954] ? may_open+0x1f2/0x400 [ 459.159405][ T1954] path_openat+0x19af/0x29c0 [ 459.164004][ T1954] ? path_lookupat+0x770/0x770 [ 459.168787][ T1954] do_filp_open+0x1de/0x430 [ 459.173384][ T1954] ? may_open_dev+0xf0/0xf0 [ 459.177889][ T1954] ? expand_files+0x442/0x910 [ 459.182580][ T1954] ? _raw_spin_unlock+0x28/0x40 [ 459.187437][ T1954] ? alloc_fd+0x2da/0x6c0 [ 459.192206][ T1954] do_sys_openat2+0x176/0x1e0 [ 459.196889][ T1954] ? build_open_flags+0x690/0x690 [ 459.202095][ T1954] __x64_sys_openat+0x175/0x210 [ 459.206988][ T1954] ? __ia32_sys_open+0x1e0/0x1e0 [ 459.211928][ T1954] ? ksys_write+0x1a7/0x250 [ 459.216438][ T1954] ? rcu_is_watching+0x12/0xb0 [ 459.221217][ T1954] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 459.227300][ T1954] do_syscall_64+0x38/0xb0 [ 459.231732][ T1954] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 459.237665][ T1954] RIP: 0033:0x7fafba27cae9 [ 459.242097][ T1954] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 459.261708][ T1954] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 459.270134][ T1954] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 459.278112][ T1954] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 459.286089][ T1954] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 459.294234][ T1954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.302312][ T1954] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 459.310722][ T1954] 09:46:41 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x494b, &(0x7f0000000e00)) 09:46:41 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) read$hidraw(r0, 0x0, 0x0) 09:46:41 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 18) 09:46:41 executing program 5: r0 = socket$isdn(0x22, 0x3, 0x22) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) sendto$phonet(r1, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) 09:46:41 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x14) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0x1, {0x7, 0x0, 0x4}, 0xfd}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x80, 0x7f, 0x79, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x7, 0x88, 0x4, 0x5}}) connect$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x3}, 0xff}, 0x18) 09:46:41 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async, rerun: 64) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async, rerun: 64) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) read$hidraw(r0, 0x0, 0x0) 09:46:41 executing program 5: r0 = socket$isdn(0x22, 0x3, 0x22) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) sendto$phonet(r1, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) 09:46:41 executing program 2: ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000040)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000100)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) sendto$phonet(r1, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000040)) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000100)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) (async) sendto$phonet(r1, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) (async) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000080)) (async) 09:46:41 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x14) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0x1, {0x7, 0x0, 0x4}, 0xfd}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x80, 0x7f, 0x79, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x7, 0x88, 0x4, 0x5}}) connect$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x3}, 0xff}, 0x18) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x14) (async) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) (async) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) (async) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0x1, {0x7, 0x0, 0x4}, 0xfd}, 0x18) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x80, 0x7f, 0x79, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x7, 0x88, 0x4, 0x5}}) (async) connect$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x3}, 0xff}, 0x18) (async) 09:46:41 executing program 5: r0 = socket$isdn(0x22, 0x3, 0x22) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0x4) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) (async) sendto$phonet(r1, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) (async) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) 09:46:41 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x6, 0x8000) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x100000000, 0x4200) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000040)) 09:46:41 executing program 5: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x5) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:46:41 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x4b47, &(0x7f0000000e00)) 09:46:41 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_open_dev$hidraw(&(0x7f0000000080), 0x6, 0x8000) (async, rerun: 32) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x100000000, 0x4200) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000040)) [ 459.688267][ T1985] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 459.698742][ T1987] FAULT_INJECTION: forcing a failure. [ 459.698742][ T1987] name failslab, interval 1, probability 0, space 0, times 0 [ 459.812524][ T1987] CPU: 0 PID: 1987 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 459.822653][ T1987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 459.832731][ T1987] Call Trace: [ 459.836042][ T1987] [ 459.839010][ T1987] dump_stack_lvl+0x125/0x1b0 [ 459.843742][ T1987] should_fail_ex+0x496/0x5b0 [ 459.848464][ T1987] should_failslab+0x9/0x20 [ 459.853009][ T1987] kmem_cache_alloc_node+0x64/0x540 [ 459.858264][ T1987] alloc_unbound_pwq+0x41e/0xd00 [ 459.863244][ T1987] ? kasan_set_track+0x25/0x30 [ 459.868303][ T1987] apply_wqattrs_prepare+0x3be/0xa90 [ 459.873644][ T1987] apply_workqueue_attrs_locked+0xcb/0x150 [ 459.879582][ T1987] alloc_workqueue+0xc8b/0x1490 [ 459.884487][ T1987] ? workqueue_sysfs_register+0x400/0x400 [ 459.890250][ T1987] ? rcu_is_watching+0x12/0xb0 [ 459.895051][ T1987] nci_register_device+0x221/0xb80 [ 459.900201][ T1987] ? nci_init_complete_req+0x410/0x410 [ 459.905704][ T1987] ? lockdep_init_map_type+0x16d/0x7c0 [ 459.911210][ T1987] virtual_ncidev_open+0x147/0x220 [ 459.916368][ T1987] ? virtual_ncidev_read+0x4e0/0x4e0 [ 459.921698][ T1987] misc_open+0x3da/0x4c0 [ 459.925973][ T1987] ? misc_devnode+0x120/0x120 [ 459.930684][ T1987] chrdev_open+0x277/0x700 [ 459.935141][ T1987] ? __unregister_chrdev+0x100/0x100 [ 459.940722][ T1987] ? fsnotify_perm.part.0+0x25d/0x630 [ 459.946224][ T1987] ? fsnotify_perm.part.0+0x268/0x630 [ 459.951641][ T1987] do_dentry_open+0x88b/0x1730 [ 459.956611][ T1987] ? __unregister_chrdev+0x100/0x100 [ 459.961933][ T1987] ? may_open+0x1f2/0x400 [ 459.966303][ T1987] path_openat+0x19af/0x29c0 [ 459.970923][ T1987] ? path_lookupat+0x770/0x770 [ 459.975730][ T1987] do_filp_open+0x1de/0x430 [ 459.980357][ T1987] ? may_open_dev+0xf0/0xf0 [ 459.984887][ T1987] ? expand_files+0x442/0x910 [ 459.989602][ T1987] ? _raw_spin_unlock+0x28/0x40 [ 459.994717][ T1987] ? alloc_fd+0x2da/0x6c0 [ 459.999086][ T1987] do_sys_openat2+0x176/0x1e0 [ 460.003801][ T1987] ? build_open_flags+0x690/0x690 [ 460.008860][ T1987] __x64_sys_openat+0x175/0x210 [ 460.013753][ T1987] ? __ia32_sys_open+0x1e0/0x1e0 [ 460.018729][ T1987] ? ksys_write+0x1a7/0x250 [ 460.023272][ T1987] ? rcu_is_watching+0x12/0xb0 [ 460.028322][ T1987] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 460.034348][ T1987] do_syscall_64+0x38/0xb0 [ 460.038901][ T1987] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 460.044837][ T1987] RIP: 0033:0x7fafba27cae9 [ 460.049278][ T1987] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 460.069001][ T1987] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 460.077538][ T1987] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 460.085709][ T1987] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 460.093875][ T1987] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 460.101869][ T1987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.109863][ T1987] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 460.117868][ T1987] 09:46:42 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 19) 09:46:42 executing program 2: ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000040)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000100)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) sendto$phonet(r1, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000040)) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000100)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) (async) sendto$phonet(r1, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) (async) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000080)) (async) 09:46:42 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x14) (async) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) (async) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0x1, {0x7, 0x0, 0x4}, 0xfd}, 0x18) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x80, 0x7f, 0x79, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x7, 0x88, 0x4, 0x5}}) (async, rerun: 64) connect$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x3}, 0xff}, 0x18) 09:46:42 executing program 5: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x5) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:46:42 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x6, 0x8000) (async) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x100000000, 0x4200) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000040)) 09:46:42 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x4b49, &(0x7f0000000e00)) 09:46:42 executing program 3: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:42 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000300)="65a3c62ac3b33366c8b2696015517f693c55d5fab27741f36309ef86a4fdbf9cb1c7347f903e7fa3b1cf3e4735fd4400b6d6a3b220c7ff323eceb6664f97556b46576832f0b3b609a26074cdfe36a7cec7cc3880c0122b8fec1ad43ff9d2e0b33b4dffbb135d85c332b0013359a1996c1808326d13a10b473ad49bc0a828c785101fc866c896edaa8a5be3438ca9a2b17abd630d7cb26fdc233ad0778380fc84b62c34ee2f806132") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x220}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tpv3, 0x80, &(0x7f0000000140)=[{&(0x7f0000000880)=""/173, 0xad}], 0x1, &(0x7f0000000180)=""/218, 0xda}, 0x10001) 09:46:42 executing program 5: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x5) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:46:42 executing program 3: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) 09:46:42 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:42 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x5054, &(0x7f0000000e00)) [ 460.410222][ T2039] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 460.495085][ T2046] FAULT_INJECTION: forcing a failure. [ 460.495085][ T2046] name failslab, interval 1, probability 0, space 0, times 0 [ 460.632899][ T2046] CPU: 1 PID: 2046 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 460.642947][ T2046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 460.653029][ T2046] Call Trace: [ 460.656511][ T2046] [ 460.659458][ T2046] dump_stack_lvl+0x125/0x1b0 [ 460.664181][ T2046] should_fail_ex+0x496/0x5b0 [ 460.668903][ T2046] should_failslab+0x9/0x20 [ 460.673447][ T2046] kmem_cache_alloc_node+0x64/0x540 [ 460.678894][ T2046] alloc_unbound_pwq+0x41e/0xd00 [ 460.683975][ T2046] ? kasan_set_track+0x25/0x30 [ 460.689036][ T2046] apply_wqattrs_prepare+0x3be/0xa90 [ 460.694377][ T2046] apply_workqueue_attrs_locked+0xcb/0x150 [ 460.700238][ T2046] alloc_workqueue+0xc8b/0x1490 [ 460.705134][ T2046] ? workqueue_sysfs_register+0x400/0x400 [ 460.710909][ T2046] ? rcu_is_watching+0x12/0xb0 [ 460.715709][ T2046] nci_register_device+0x221/0xb80 [ 460.720864][ T2046] ? nci_init_complete_req+0x410/0x410 [ 460.728195][ T2046] ? lockdep_init_map_type+0x16d/0x7c0 [ 460.733785][ T2046] virtual_ncidev_open+0x147/0x220 [ 460.739294][ T2046] ? virtual_ncidev_read+0x4e0/0x4e0 [ 460.744637][ T2046] misc_open+0x3da/0x4c0 [ 460.748918][ T2046] ? misc_devnode+0x120/0x120 [ 460.753627][ T2046] chrdev_open+0x277/0x700 [ 460.758958][ T2046] ? __unregister_chrdev+0x100/0x100 [ 460.764272][ T2046] ? fsnotify_perm.part.0+0x25d/0x630 [ 460.769685][ T2046] ? fsnotify_perm.part.0+0x268/0x630 [ 460.775274][ T2046] do_dentry_open+0x88b/0x1730 [ 460.780157][ T2046] ? __unregister_chrdev+0x100/0x100 [ 460.785487][ T2046] ? may_open+0x1f2/0x400 [ 460.789873][ T2046] path_openat+0x19af/0x29c0 [ 460.794592][ T2046] ? path_lookupat+0x770/0x770 [ 460.799407][ T2046] do_filp_open+0x1de/0x430 [ 460.803937][ T2046] ? may_open_dev+0xf0/0xf0 [ 460.808472][ T2046] ? expand_files+0x442/0x910 [ 460.813190][ T2046] ? _raw_spin_unlock+0x28/0x40 [ 460.818087][ T2046] ? alloc_fd+0x2da/0x6c0 [ 460.822606][ T2046] do_sys_openat2+0x176/0x1e0 [ 460.827340][ T2046] ? build_open_flags+0x690/0x690 [ 460.832664][ T2046] __x64_sys_openat+0x175/0x210 [ 460.837556][ T2046] ? __ia32_sys_open+0x1e0/0x1e0 [ 460.842533][ T2046] ? ksys_write+0x1a7/0x250 [ 460.847181][ T2046] ? rcu_is_watching+0x12/0xb0 [ 460.852068][ T2046] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 460.858084][ T2046] do_syscall_64+0x38/0xb0 [ 460.862592][ T2046] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 460.868614][ T2046] RIP: 0033:0x7fafba27cae9 [ 460.873071][ T2046] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 460.892703][ T2046] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 460.901141][ T2046] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 460.909224][ T2046] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 460.917214][ T2046] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 460.925211][ T2046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.933223][ T2046] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 460.941229][ T2046] 09:46:42 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 20) 09:46:42 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000300)="65a3c62ac3b33366c8b2696015517f693c55d5fab27741f36309ef86a4fdbf9cb1c7347f903e7fa3b1cf3e4735fd4400b6d6a3b220c7ff323eceb6664f97556b46576832f0b3b609a26074cdfe36a7cec7cc3880c0122b8fec1ad43ff9d2e0b33b4dffbb135d85c332b0013359a1996c1808326d13a10b473ad49bc0a828c785101fc866c896edaa8a5be3438ca9a2b17abd630d7cb26fdc233ad0778380fc84b62c34ee2f806132") (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r1, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8010000160a03000000000000000000070000010900010073797a30000000000900010001000100000000000900010073797a30000000000900010073797a3000000000720a000000000000000000010c00054000000000000000050c00054000000000000000020c0005400000000000000005840103800800024000000fff08000240000007ff080002400001000118000380140001007663616e300000000000000000000000a40003801400010076657468305f766972745f77696669001400010070696d726567000000000000000000001400010076657468305f746f5f62726964676500140001006272696467655f736c6176655f3000001400010064756d6d79300000000000000000000014000100746561095f736c6176655f3100000000140001006272696467655f736c6176655f300000140001006d61637674617030000000000000000004000380180003801400010077673200000000000000000000000000900003801400010070696d726567300000000000000000001400010076657468315f748d5f7465616d00000014000100776c616e310000000000000000000000140001006970b6746e6c30000000000000000000140001006d6163766c616e3000000000000000001400011070696d36726567000000000000000000140001006c6f0000000000000000000000000000140000001100010000000000000000000000000ac0b4eff02e57ab1a73e4d3ca26e0e6218f899ac7b25f644bb870dab134590d972296866e01ade78b8fb757a8d3af3c358d43dc5b389740a66690a3c3c2640121f01ee3d5a6ed740cb89f4c7213d28ddc4958a7f15d8c4ef549bd00d8ae2d659a42d525b40400ccba4508a0a830ef98e9b20eede94e867f36a1dd46074cf9e1cb93331eb8f514"], 0x220}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tpv3, 0x80, &(0x7f0000000140)=[{&(0x7f0000000880)=""/173, 0xad}], 0x1, &(0x7f0000000180)=""/218, 0xda}, 0x10001) 09:46:42 executing program 3: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) (async) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:42 executing program 5: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x6) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:46:42 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x5154, &(0x7f0000000e00)) 09:46:42 executing program 5: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x6) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:46:42 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000400)={0x3f, "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"}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)="f0b9b1e38f1b3bb2d0e8906e44d2190faae60b9132db64d8fe232260947ecf124e54d845a6a11435c7e9adfc03fa37") read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000000)) 09:46:42 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (rerun: 32) 09:46:42 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000300)="65a3c62ac3b33366c8b2696015517f693c55d5fab27741f36309ef86a4fdbf9cb1c7347f903e7fa3b1cf3e4735fd4400b6d6a3b220c7ff323eceb6664f97556b46576832f0b3b609a26074cdfe36a7cec7cc3880c0122b8fec1ad43ff9d2e0b33b4dffbb135d85c332b0013359a1996c1808326d13a10b473ad49bc0a828c785101fc866c896edaa8a5be3438ca9a2b17abd630d7cb26fdc233ad0778380fc84b62c34ee2f806132") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8010000160a03000000000000000000070000010900010073797a30000000000900010001000100000000000900010073797a30000000000900010073797a3000000000720a000000000000000000010c00054000000000000000050c00054000000000000000020c0005400000000000000005840103800800024000000fff08000240000007ff080002400001000118000380140001007663616e300000000000000000000000a40003801400010076657468305f766972745f77696669001400010070696d726567000000000000000000001400010076657468305f746f5f62726964676500140001006272696467655f736c6176655f3000001400010064756d6d79300000000000000000000014000100746561095f736c6176655f3100000000140001006272696467655f736c6176655f300000140001006d61637674617030000000000000000004000380180003801400010077673200000000000000000000000000900003801400010070696d726567300000000000000000001400010076657468315f748d5f7465616d00000014000100776c616e310000000000000000000000140001006970b6746e6c30000000000000000000140001006d6163766c616e3000000000000000001400011070696d36726567000000000000000000140001006c6f0000000000000000000000000000140000001100010000000000000000000000000ac0b4eff02e57ab1a73e4d3ca26e0e6218f899ac7b25f644bb870dab134590d972296866e01ade78b8fb757a8d3af3c358d43dc5b389740a66690a3c3c2640121f01ee3d5a6ed740cb89f4c7213d28ddc4958a7f15d8c4ef549bd00d8ae2d659a42d525b40400ccba4508a0a830ef98e9b20eede94e867f36a1dd46074cf9e1cb93331eb8f514"], 0x220}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tpv3, 0x80, &(0x7f0000000140)=[{&(0x7f0000000880)=""/173, 0xad}], 0x1, &(0x7f0000000180)=""/218, 0xda}, 0x10001) 09:46:43 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000400)={0x3f, "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"}) (async) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000400)={0x3f, "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"}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)="f0b9b1e38f1b3bb2d0e8906e44d2190faae60b9132db64d8fe232260947ecf124e54d845a6a11435c7e9adfc03fa37") (async) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)="f0b9b1e38f1b3bb2d0e8906e44d2190faae60b9132db64d8fe232260947ecf124e54d845a6a11435c7e9adfc03fa37") read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000000)) 09:46:43 executing program 5: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x6) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 461.207361][ T2093] FAULT_INJECTION: forcing a failure. [ 461.207361][ T2093] name failslab, interval 1, probability 0, space 0, times 0 09:46:43 executing program 4: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0xfffffff9, 0x9, 0xff, 0x400, 0x4, "f0d9ced97523940f3b5e5fc0d5898619078aad", 0x2, 0x183}) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0x3, 0x401, 0x8000000000000000, 0x1, 0x4, 0x245}) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) getpriority(0x1, 0x0) [ 461.254325][ T2093] CPU: 0 PID: 2093 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 461.264369][ T2093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 461.274457][ T2093] Call Trace: [ 461.277769][ T2093] [ 461.280905][ T2093] dump_stack_lvl+0x125/0x1b0 [ 461.285722][ T2093] should_fail_ex+0x496/0x5b0 [ 461.290459][ T2093] ? __kthread_create_on_node+0x189/0x400 [ 461.296427][ T2093] ? __kthread_create_on_node+0x189/0x400 [ 461.302185][ T2093] should_failslab+0x9/0x20 [ 461.306738][ T2093] __kmem_cache_alloc_node+0x5f/0x470 [ 461.312154][ T2093] ? pointer+0xbf0/0xbf0 [ 461.316441][ T2093] ? __kthread_create_on_node+0x189/0x400 [ 461.322285][ T2093] __kmalloc_node_track_caller+0x50/0x100 [ 461.328061][ T2093] kvasprintf+0xbd/0x150 [ 461.332345][ T2093] ? bust_spinlocks+0xe0/0xe0 [ 461.337079][ T2093] ? worker_thread+0x1290/0x1290 [ 461.342060][ T2093] __kthread_create_on_node+0x189/0x400 [ 461.347732][ T2093] ? kthread_parkme+0xa0/0xa0 [ 461.352661][ T2093] ? worker_thread+0x1290/0x1290 [ 461.357638][ T2093] kthread_create_on_node+0xc8/0x100 [ 461.362954][ T2093] ? __kthread_create_on_node+0x400/0x400 [ 461.368713][ T2093] ? kasan_set_track+0x25/0x30 [ 461.373512][ T2093] init_rescuer+0xce/0x1f0 [ 461.377969][ T2093] alloc_workqueue+0xd35/0x1490 [ 461.382863][ T2093] ? workqueue_sysfs_register+0x400/0x400 [ 461.388639][ T2093] ? rcu_is_watching+0x12/0xb0 [ 461.393527][ T2093] nci_register_device+0x221/0xb80 [ 461.398681][ T2093] ? nci_init_complete_req+0x410/0x410 [ 461.404185][ T2093] ? lockdep_init_map_type+0x16d/0x7c0 [ 461.409692][ T2093] virtual_ncidev_open+0x147/0x220 [ 461.414939][ T2093] ? virtual_ncidev_read+0x4e0/0x4e0 [ 461.420269][ T2093] misc_open+0x3da/0x4c0 [ 461.424650][ T2093] ? misc_devnode+0x120/0x120 [ 461.429449][ T2093] chrdev_open+0x277/0x700 [ 461.433906][ T2093] ? __unregister_chrdev+0x100/0x100 [ 461.439314][ T2093] ? fsnotify_perm.part.0+0x25d/0x630 [ 461.444728][ T2093] ? fsnotify_perm.part.0+0x268/0x630 [ 461.450142][ T2093] do_dentry_open+0x88b/0x1730 [ 461.454938][ T2093] ? __unregister_chrdev+0x100/0x100 [ 461.460255][ T2093] ? may_open+0x1f2/0x400 [ 461.464630][ T2093] path_openat+0x19af/0x29c0 [ 461.469257][ T2093] ? path_lookupat+0x770/0x770 [ 461.474327][ T2093] do_filp_open+0x1de/0x430 [ 461.478870][ T2093] ? may_open_dev+0xf0/0xf0 [ 461.483400][ T2093] ? expand_files+0x442/0x910 [ 461.488125][ T2093] ? _raw_spin_unlock+0x28/0x40 [ 461.493118][ T2093] ? alloc_fd+0x2da/0x6c0 [ 461.497487][ T2093] do_sys_openat2+0x176/0x1e0 [ 461.502228][ T2093] ? build_open_flags+0x690/0x690 [ 461.507373][ T2093] __x64_sys_openat+0x175/0x210 [ 461.512279][ T2093] ? __ia32_sys_open+0x1e0/0x1e0 [ 461.517257][ T2093] ? ksys_write+0x1a7/0x250 [ 461.521801][ T2093] ? rcu_is_watching+0x12/0xb0 [ 461.526599][ T2093] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 461.532616][ T2093] do_syscall_64+0x38/0xb0 [ 461.537074][ T2093] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 461.543010][ T2093] RIP: 0033:0x7fafba27cae9 [ 461.547458][ T2093] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 461.567268][ T2093] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 461.575797][ T2093] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 461.583796][ T2093] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 461.591808][ T2093] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 461.599812][ T2093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.607900][ T2093] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 461.615987][ T2093] 09:46:43 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 21) 09:46:43 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x45, 0xad1fdcb5d7a8ef5e) recvfrom$phonet(r1, &(0x7f0000000080)=""/58, 0x3a, 0x1, &(0x7f00000000c0)={0x23, 0x80, 0x5, 0x1}, 0x10) 09:46:43 executing program 4: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0xfffffff9, 0x9, 0xff, 0x400, 0x4, "f0d9ced97523940f3b5e5fc0d5898619078aad", 0x2, 0x183}) (async) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0x3, 0x401, 0x8000000000000000, 0x1, 0x4, 0x245}) (async) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) getpriority(0x1, 0x0) 09:46:43 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000400)={0x3f, "154baf54308d59a754c11351642d6151756adcbfbc903bad29ab18d39cb777609d5abc23741e44b5c33065701553edd3f6f1ad28974c03a832f9c79ecb8173da0cfa1577ee996804447aa6f6c02137c19fb2401119a79c97fab599ce38177b8c2d7b25b6aac6b13fd7cae86185977b69384eef63fb0327f55f1ad918b52887993bdbc32fb5b7013613a5bb987c4242b6cf8a96716a80f2eea62242c62f0341778287048f4f7294d261258ff2e2fd8cfa9a48a3ff2a923a17997fcd7252c8118e5b2e62e4a53b701345b3f6315d41c3701fbff90d396eb7e9b09ba71736d20eef869c4e25664c3c7f17de7cb96aa6ea1da89237600da116a91505215e306c236179da77f9e1efcb2e88323e00cf2c074bef454648342bb4e5de3992748456375b44647e7b1474fab6ef233c0f73d35f3c611d85af139ea58a5cdadc27e793d291becd21b2bdb15270eddf3c9df82a5a564050966c5fd8ff7268784d3af9218b9169ccba6c2a9b1edcff09bdd3631941dd5e8af70c6c913664bbdbf57e71164aa907e8a73122ae256103117a971644a57d8c2816b7a08aae5f19e7fd9e420a313f091f38ea2f4a805e0d2dd3d7bb87d3935d8a736d6277703d5dad6cb6f2354b99407074734757c204290cbfd1df7356edc524d300e4c7a52a0f05c48079fd4ca6e8cd8bfaf00617be7da4aad117019dea8d74990fc1d881568f7f5cfdc9c7c32b"}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)="f0b9b1e38f1b3bb2d0e8906e44d2190faae60b9132db64d8fe232260947ecf124e54d845a6a11435c7e9adfc03fa37") (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000000)) 09:46:43 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:43 executing program 4: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0xfffffff9, 0x9, 0xff, 0x400, 0x4, "f0d9ced97523940f3b5e5fc0d5898619078aad", 0x2, 0x183}) (async, rerun: 32) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0x3, 0x401, 0x8000000000000000, 0x1, 0x4, 0x245}) (async, rerun: 32) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) getpriority(0x1, 0x0) 09:46:43 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x5254, &(0x7f0000000e00)) 09:46:43 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x45, 0xad1fdcb5d7a8ef5e) recvfrom$phonet(r1, &(0x7f0000000080)=""/58, 0x3a, 0x1, &(0x7f00000000c0)={0x23, 0x80, 0x5, 0x1}, 0x10) [ 461.654106][ T2093] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 461.755291][ T2129] FAULT_INJECTION: forcing a failure. [ 461.755291][ T2129] name failslab, interval 1, probability 0, space 0, times 0 [ 461.861144][ T2129] CPU: 0 PID: 2129 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 461.871184][ T2129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 461.881526][ T2129] Call Trace: [ 461.884843][ T2129] [ 461.887815][ T2129] dump_stack_lvl+0x125/0x1b0 [ 461.892623][ T2129] should_fail_ex+0x496/0x5b0 [ 461.897350][ T2129] should_failslab+0x9/0x20 [ 461.901983][ T2129] __kmem_cache_alloc_node+0x5f/0x470 09:46:43 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x45, 0xad1fdcb5d7a8ef5e) recvfrom$phonet(r1, &(0x7f0000000080)=""/58, 0x3a, 0x1, &(0x7f00000000c0)={0x23, 0x80, 0x5, 0x1}, 0x10) [ 461.907397][ T2129] ? lockdep_init_map_type+0x16d/0x7c0 [ 461.912903][ T2129] ? worker_thread+0x1290/0x1290 [ 461.917978][ T2129] kmalloc_trace+0x25/0xe0 [ 461.922469][ T2129] __kthread_create_on_node+0xcb/0x400 [ 461.927972][ T2129] ? kthread_parkme+0xa0/0xa0 [ 461.932697][ T2129] ? worker_thread+0x1290/0x1290 [ 461.937675][ T2129] kthread_create_on_node+0xc8/0x100 [ 461.943001][ T2129] ? __kthread_create_on_node+0x400/0x400 [ 461.948847][ T2129] ? kasan_set_track+0x25/0x30 [ 461.953638][ T2129] init_rescuer+0xce/0x1f0 [ 461.958068][ T2129] alloc_workqueue+0xd35/0x1490 [ 461.963192][ T2129] ? workqueue_sysfs_register+0x400/0x400 [ 461.968934][ T2129] ? rcu_is_watching+0x12/0xb0 [ 461.973811][ T2129] nci_register_device+0x221/0xb80 [ 461.978936][ T2129] ? nci_init_complete_req+0x410/0x410 [ 461.984448][ T2129] ? lockdep_init_map_type+0x16d/0x7c0 [ 461.990133][ T2129] virtual_ncidev_open+0x147/0x220 [ 461.995263][ T2129] ? virtual_ncidev_read+0x4e0/0x4e0 [ 462.000564][ T2129] misc_open+0x3da/0x4c0 [ 462.004821][ T2129] ? misc_devnode+0x120/0x120 [ 462.009501][ T2129] chrdev_open+0x277/0x700 [ 462.013922][ T2129] ? __unregister_chrdev+0x100/0x100 [ 462.019216][ T2129] ? fsnotify_perm.part.0+0x25d/0x630 [ 462.024598][ T2129] ? fsnotify_perm.part.0+0x268/0x630 [ 462.030070][ T2129] do_dentry_open+0x88b/0x1730 [ 462.034842][ T2129] ? __unregister_chrdev+0x100/0x100 [ 462.040134][ T2129] ? may_open+0x1f2/0x400 [ 462.044475][ T2129] path_openat+0x19af/0x29c0 [ 462.049678][ T2129] ? path_lookupat+0x770/0x770 [ 462.054460][ T2129] do_filp_open+0x1de/0x430 [ 462.058967][ T2129] ? may_open_dev+0xf0/0xf0 [ 462.063494][ T2129] ? expand_files+0x442/0x910 [ 462.068180][ T2129] ? _raw_spin_unlock+0x28/0x40 [ 462.073123][ T2129] ? alloc_fd+0x2da/0x6c0 [ 462.077465][ T2129] do_sys_openat2+0x176/0x1e0 [ 462.082150][ T2129] ? build_open_flags+0x690/0x690 [ 462.087275][ T2129] __x64_sys_openat+0x175/0x210 [ 462.092240][ T2129] ? __ia32_sys_open+0x1e0/0x1e0 [ 462.097183][ T2129] ? ksys_write+0x1a7/0x250 [ 462.101838][ T2129] ? rcu_is_watching+0x12/0xb0 [ 462.106694][ T2129] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 462.112766][ T2129] do_syscall_64+0x38/0xb0 [ 462.117223][ T2129] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 462.123251][ T2129] RIP: 0033:0x7fafba27cae9 [ 462.127669][ T2129] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 462.147278][ T2129] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 09:46:44 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 22) [ 462.156041][ T2129] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 462.164199][ T2129] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 462.172171][ T2129] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 462.180406][ T2129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 462.188379][ T2129] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 462.196359][ T2129] 09:46:44 executing program 4: ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0x7) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8000, 0x141000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0)=0x80000, 0x7) 09:46:44 executing program 3: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x3) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:46:44 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x541b, &(0x7f0000000e00)) 09:46:44 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) [ 462.214108][ T2129] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 462.350601][ T2166] FAULT_INJECTION: forcing a failure. [ 462.350601][ T2166] name failslab, interval 1, probability 0, space 0, times 0 [ 462.407252][ T2166] CPU: 1 PID: 2166 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 462.417318][ T2166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 462.427488][ T2166] Call Trace: [ 462.430798][ T2166] [ 462.433752][ T2166] dump_stack_lvl+0x125/0x1b0 [ 462.438566][ T2166] should_fail_ex+0x496/0x5b0 [ 462.443304][ T2166] ? __kthread_create_on_node+0x189/0x400 [ 462.449173][ T2166] ? __kthread_create_on_node+0x189/0x400 [ 462.454940][ T2166] should_failslab+0x9/0x20 [ 462.459585][ T2166] __kmem_cache_alloc_node+0x5f/0x470 [ 462.465006][ T2166] ? pointer+0xbf0/0xbf0 [ 462.469380][ T2166] ? __kthread_create_on_node+0x189/0x400 [ 462.475229][ T2166] __kmalloc_node_track_caller+0x50/0x100 [ 462.485528][ T2166] kvasprintf+0xbd/0x150 [ 462.489828][ T2166] ? bust_spinlocks+0xe0/0xe0 [ 462.494815][ T2166] ? worker_thread+0x1290/0x1290 [ 462.499800][ T2166] __kthread_create_on_node+0x189/0x400 [ 462.505697][ T2166] ? kthread_parkme+0xa0/0xa0 [ 462.510446][ T2166] ? worker_thread+0x1290/0x1290 [ 462.515437][ T2166] kthread_create_on_node+0xc8/0x100 [ 462.520854][ T2166] ? __kthread_create_on_node+0x400/0x400 [ 462.526611][ T2166] ? kasan_set_track+0x25/0x30 [ 462.531392][ T2166] init_rescuer+0xce/0x1f0 [ 462.535823][ T2166] alloc_workqueue+0xd35/0x1490 [ 462.540695][ T2166] ? workqueue_sysfs_register+0x400/0x400 [ 462.546429][ T2166] ? rcu_is_watching+0x12/0xb0 [ 462.551294][ T2166] nci_register_device+0x221/0xb80 [ 462.556427][ T2166] ? nci_init_complete_req+0x410/0x410 [ 462.561894][ T2166] ? lockdep_init_map_type+0x16d/0x7c0 [ 462.567368][ T2166] virtual_ncidev_open+0x147/0x220 [ 462.572504][ T2166] ? virtual_ncidev_read+0x4e0/0x4e0 [ 462.578011][ T2166] misc_open+0x3da/0x4c0 [ 462.582461][ T2166] ? misc_devnode+0x120/0x120 [ 462.587163][ T2166] chrdev_open+0x277/0x700 [ 462.591591][ T2166] ? __unregister_chrdev+0x100/0x100 [ 462.596878][ T2166] ? fsnotify_perm.part.0+0x25d/0x630 [ 462.602283][ T2166] ? fsnotify_perm.part.0+0x268/0x630 [ 462.608534][ T2166] do_dentry_open+0x88b/0x1730 [ 462.613309][ T2166] ? __unregister_chrdev+0x100/0x100 [ 462.618611][ T2166] ? may_open+0x1f2/0x400 [ 462.622956][ T2166] path_openat+0x19af/0x29c0 [ 462.627558][ T2166] ? path_lookupat+0x770/0x770 [ 462.632378][ T2166] do_filp_open+0x1de/0x430 [ 462.636896][ T2166] ? may_open_dev+0xf0/0xf0 [ 462.641397][ T2166] ? expand_files+0x442/0x910 [ 462.646261][ T2166] ? _raw_spin_unlock+0x28/0x40 [ 462.651402][ T2166] ? alloc_fd+0x2da/0x6c0 [ 462.655751][ T2166] do_sys_openat2+0x176/0x1e0 [ 462.660446][ T2166] ? build_open_flags+0x690/0x690 [ 462.665478][ T2166] __x64_sys_openat+0x175/0x210 [ 462.670604][ T2166] ? __ia32_sys_open+0x1e0/0x1e0 [ 462.675721][ T2166] ? ksys_write+0x1a7/0x250 [ 462.680238][ T2166] ? rcu_is_watching+0x12/0xb0 [ 462.685004][ T2166] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 462.690994][ T2166] do_syscall_64+0x38/0xb0 [ 462.695429][ T2166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 462.701343][ T2166] RIP: 0033:0x7fafba27cae9 [ 462.705758][ T2166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 462.726675][ T2166] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 462.735095][ T2166] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 462.743070][ T2166] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 462.751062][ T2166] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 462.759036][ T2166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 462.767039][ T2166] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 462.775050][ T2166] 09:46:44 executing program 3: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x3) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x3) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) 09:46:44 executing program 4: ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0x7) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8000, 0x141000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0)=0x80000, 0x7) 09:46:44 executing program 3: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x3) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:44 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (async) 09:46:44 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x5421, &(0x7f0000000e00)) 09:46:44 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 23) 09:46:44 executing program 4: ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0x7) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8000, 0x141000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0)=0x80000, 0x7) 09:46:45 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x3, 0x800, 0xe62, 0xa, 0xe, "13a6fc0cee3713000e82401d3413b64707450f"}) 09:46:45 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x20) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/57, 0x39}, {&(0x7f00000004c0)=""/228, 0xe4}, {&(0x7f00000005c0)=""/56, 0x38}, {&(0x7f0000000600)=""/98, 0x62}, {&(0x7f0000000680)=""/171, 0xab}, {&(0x7f0000000740)}, {&(0x7f0000000780)=""/158, 0x9e}, {&(0x7f0000000840)=""/44, 0x2c}, {&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000940)=""/110, 0x6e}], 0xa}, 0x40000001) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan1\x00'}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvmsg$can_j1939(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000100)=""/195, 0xc3}, {&(0x7f0000000040)=""/91, 0x5b}, {&(0x7f0000000200)=""/11, 0xb}], 0x5, &(0x7f0000000340)=""/128, 0x80}, 0x40018063) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r1}, 0x8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000b00)={0x49b9, r0}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r3, 0x4b36) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000140)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f0000000c40), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r4, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) 09:46:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:46:45 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:45 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x3, 0x800, 0xe62, 0xa, 0xe, "13a6fc0cee3713000e82401d3413b64707450f"}) (async) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x3, 0x800, 0xe62, 0xa, 0xe, "13a6fc0cee3713000e82401d3413b64707450f"}) [ 462.952644][ T2166] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 463.305215][ T2229] FAULT_INJECTION: forcing a failure. [ 463.305215][ T2229] name failslab, interval 1, probability 0, space 0, times 0 [ 463.365163][ T2229] CPU: 0 PID: 2229 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 463.375211][ T2229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 463.385479][ T2229] Call Trace: [ 463.388782][ T2229] [ 463.391740][ T2229] dump_stack_lvl+0x125/0x1b0 [ 463.396454][ T2229] should_fail_ex+0x496/0x5b0 [ 463.401190][ T2229] ? kasprintf+0xc8/0x100 [ 463.405550][ T2229] ? kasprintf+0xc8/0x100 [ 463.409891][ T2229] should_failslab+0x9/0x20 [ 463.414402][ T2229] __kmem_cache_alloc_node+0x5f/0x470 [ 463.419780][ T2229] ? pointer+0xbf0/0xbf0 [ 463.424133][ T2229] ? kasprintf+0xc8/0x100 [ 463.428652][ T2229] __kmalloc_node_track_caller+0x50/0x100 [ 463.434392][ T2229] kvasprintf+0xbd/0x150 [ 463.438653][ T2229] ? bust_spinlocks+0xe0/0xe0 [ 463.443337][ T2229] ? ip6_addr_string_sa+0x820/0x820 [ 463.448541][ T2229] ? preempt_count_add+0x72/0x140 [ 463.453570][ T2229] kasprintf+0xc8/0x100 [ 463.457732][ T2229] ? kvasprintf_const+0x190/0x190 [ 463.462764][ T2229] ? free_zapped_rcu+0x290/0x290 [ 463.467709][ T2229] ? lockdep_init_map_type+0x16d/0x7c0 [ 463.473177][ T2229] alloc_workqueue+0x590/0x1490 [ 463.478038][ T2229] ? lock_sync+0x190/0x190 [ 463.482460][ T2229] ? workqueue_sysfs_register+0x400/0x400 [ 463.488275][ T2229] ? rcu_is_watching+0x12/0xb0 [ 463.493040][ T2229] nci_register_device+0x397/0xb80 [ 463.498161][ T2229] ? nci_init_complete_req+0x410/0x410 [ 463.503635][ T2229] ? lockdep_init_map_type+0x16d/0x7c0 [ 463.509109][ T2229] virtual_ncidev_open+0x147/0x220 [ 463.514235][ T2229] ? virtual_ncidev_read+0x4e0/0x4e0 [ 463.519529][ T2229] misc_open+0x3da/0x4c0 [ 463.523867][ T2229] ? misc_devnode+0x120/0x120 [ 463.528549][ T2229] chrdev_open+0x277/0x700 [ 463.532970][ T2229] ? __unregister_chrdev+0x100/0x100 [ 463.538259][ T2229] ? fsnotify_perm.part.0+0x25d/0x630 [ 463.543642][ T2229] ? fsnotify_perm.part.0+0x268/0x630 [ 463.549022][ T2229] do_dentry_open+0x88b/0x1730 [ 463.553789][ T2229] ? __unregister_chrdev+0x100/0x100 [ 463.559079][ T2229] ? may_open+0x1f2/0x400 [ 463.563420][ T2229] path_openat+0x19af/0x29c0 [ 463.568012][ T2229] ? path_lookupat+0x770/0x770 [ 463.572810][ T2229] do_filp_open+0x1de/0x430 [ 463.577319][ T2229] ? may_open_dev+0xf0/0xf0 [ 463.581822][ T2229] ? expand_files+0x442/0x910 [ 463.586511][ T2229] ? _raw_spin_unlock+0x28/0x40 [ 463.591368][ T2229] ? alloc_fd+0x2da/0x6c0 [ 463.595700][ T2229] do_sys_openat2+0x176/0x1e0 [ 463.600382][ T2229] ? build_open_flags+0x690/0x690 [ 463.605508][ T2229] __x64_sys_openat+0x175/0x210 [ 463.610364][ T2229] ? __ia32_sys_open+0x1e0/0x1e0 [ 463.615307][ T2229] ? ksys_write+0x1a7/0x250 [ 463.619817][ T2229] ? rcu_is_watching+0x12/0xb0 [ 463.624579][ T2229] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 463.630577][ T2229] do_syscall_64+0x38/0xb0 [ 463.635010][ T2229] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 463.640917][ T2229] RIP: 0033:0x7fafba27cae9 [ 463.645334][ T2229] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 463.664949][ T2229] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 463.673367][ T2229] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 463.681340][ T2229] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 463.689311][ T2229] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 463.697293][ T2229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.705263][ T2229] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 463.713238][ T2229] 09:46:45 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x5450, &(0x7f0000000e00)) [ 463.744780][ T2241] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 09:46:45 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x20) (async) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/57, 0x39}, {&(0x7f00000004c0)=""/228, 0xe4}, {&(0x7f00000005c0)=""/56, 0x38}, {&(0x7f0000000600)=""/98, 0x62}, {&(0x7f0000000680)=""/171, 0xab}, {&(0x7f0000000740)}, {&(0x7f0000000780)=""/158, 0x9e}, {&(0x7f0000000840)=""/44, 0x2c}, {&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000940)=""/110, 0x6e}], 0xa}, 0x40000001) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan1\x00'}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvmsg$can_j1939(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000100)=""/195, 0xc3}, {&(0x7f0000000040)=""/91, 0x5b}, {&(0x7f0000000200)=""/11, 0xb}], 0x5, &(0x7f0000000340)=""/128, 0x80}, 0x40018063) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r1}, 0x8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000b00)={0x49b9, r0}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r3, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000140)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f0000000c40), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r4, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) 09:46:45 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x3, 0x800, 0xe62, 0xa, 0xe, "13a6fc0cee3713000e82401d3413b64707450f"}) 09:46:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan3\x00'}) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:46:45 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x20) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/57, 0x39}, {&(0x7f00000004c0)=""/228, 0xe4}, {&(0x7f00000005c0)=""/56, 0x38}, {&(0x7f0000000600)=""/98, 0x62}, {&(0x7f0000000680)=""/171, 0xab}, {&(0x7f0000000740)}, {&(0x7f0000000780)=""/158, 0x9e}, {&(0x7f0000000840)=""/44, 0x2c}, {&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000940)=""/110, 0x6e}], 0xa}, 0x40000001) (async, rerun: 32) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan1\x00'}) (async, rerun: 32) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (rerun: 32) recvmsg$can_j1939(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000100)=""/195, 0xc3}, {&(0x7f0000000040)=""/91, 0x5b}, {&(0x7f0000000200)=""/11, 0xb}], 0x5, &(0x7f0000000340)=""/128, 0x80}, 0x40018063) (async, rerun: 64) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r1}, 0x8) (rerun: 64) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000b00)={0x49b9, r0}, 0x0) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r3, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000140)) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f0000000c40), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r4, 0x0) (async) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) 09:46:45 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 24) 09:46:45 executing program 3: write$hidraw(0xffffffffffffffff, &(0x7f00000000c0)="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", 0xff) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0xe3bc) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x9, 0xffffffe0, 0x11, "99c447d3556c75654c629abec8a8ade503fb26"}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 09:46:45 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 09:46:45 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x8, 0x5, 0xbf) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1d, 0x8, 0x7, 0x61, 0x12, 0x1, 0x289b914d, '\x00', 0x0, r1, 0x3, 0x4, 0x4}, 0x48) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) 09:46:45 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket(0x8, 0x5, 0xbf) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1d, 0x8, 0x7, 0x61, 0x12, 0x1, 0x289b914d, '\x00', 0x0, r1, 0x3, 0x4, 0x4}, 0x48) (async) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) 09:46:45 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x5451, &(0x7f0000000e00)) [ 464.136439][ T27] audit: type=1400 audit(1693734405.930:145): avc: denied { create } for pid=2280 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 464.177214][ T2285] FAULT_INJECTION: forcing a failure. [ 464.177214][ T2285] name failslab, interval 1, probability 0, space 0, times 0 09:46:46 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) [ 464.272213][ T2285] CPU: 1 PID: 2285 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 464.282270][ T2285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 464.292609][ T2285] Call Trace: [ 464.295910][ T2285] [ 464.298860][ T2285] dump_stack_lvl+0x125/0x1b0 [ 464.303585][ T2285] should_fail_ex+0x496/0x5b0 [ 464.308318][ T2285] should_failslab+0x9/0x20 [ 464.312865][ T2285] __kmem_cache_alloc_node+0x5f/0x470 [ 464.318278][ T2285] kmalloc_trace+0x25/0xe0 [ 464.322722][ T2285] alloc_workqueue+0x1d4/0x1490 [ 464.327616][ T2285] ? lock_sync+0x190/0x190 [ 464.332056][ T2285] ? workqueue_sysfs_register+0x400/0x400 [ 464.337814][ T2285] ? rcu_is_watching+0x12/0xb0 [ 464.342581][ T2285] nci_register_device+0x397/0xb80 [ 464.347709][ T2285] ? nci_init_complete_req+0x410/0x410 [ 464.353232][ T2285] ? lockdep_init_map_type+0x16d/0x7c0 [ 464.358731][ T2285] virtual_ncidev_open+0x147/0x220 [ 464.363874][ T2285] ? virtual_ncidev_read+0x4e0/0x4e0 [ 464.369213][ T2285] misc_open+0x3da/0x4c0 [ 464.373478][ T2285] ? misc_devnode+0x120/0x120 [ 464.378159][ T2285] chrdev_open+0x277/0x700 [ 464.382579][ T2285] ? __unregister_chrdev+0x100/0x100 [ 464.387866][ T2285] ? fsnotify_perm.part.0+0x25d/0x630 [ 464.393246][ T2285] ? fsnotify_perm.part.0+0x268/0x630 [ 464.398627][ T2285] do_dentry_open+0x88b/0x1730 [ 464.403398][ T2285] ? __unregister_chrdev+0x100/0x100 [ 464.408685][ T2285] ? may_open+0x1f2/0x400 [ 464.413231][ T2285] path_openat+0x19af/0x29c0 [ 464.417824][ T2285] ? path_lookupat+0x770/0x770 [ 464.422688][ T2285] do_filp_open+0x1de/0x430 [ 464.427193][ T2285] ? may_open_dev+0xf0/0xf0 [ 464.431693][ T2285] ? expand_files+0x442/0x910 [ 464.436382][ T2285] ? _raw_spin_unlock+0x28/0x40 [ 464.441240][ T2285] ? alloc_fd+0x2da/0x6c0 [ 464.445574][ T2285] do_sys_openat2+0x176/0x1e0 [ 464.450257][ T2285] ? build_open_flags+0x690/0x690 [ 464.455287][ T2285] __x64_sys_openat+0x175/0x210 [ 464.460139][ T2285] ? __ia32_sys_open+0x1e0/0x1e0 [ 464.465081][ T2285] ? ksys_write+0x1a7/0x250 [ 464.469590][ T2285] ? rcu_is_watching+0x12/0xb0 [ 464.474353][ T2285] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 464.480342][ T2285] do_syscall_64+0x38/0xb0 [ 464.484797][ T2285] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 464.490725][ T2285] RIP: 0033:0x7fafba27cae9 [ 464.495240][ T2285] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 464.514865][ T2285] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 09:46:46 executing program 3: write$hidraw(0xffffffffffffffff, &(0x7f00000000c0)="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", 0xff) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) (async) ioctl$VT_ACTIVATE(r1, 0x5606, 0xe3bc) (async) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, 0x0) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x9, 0xffffffe0, 0x11, "99c447d3556c75654c629abec8a8ade503fb26"}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 464.523283][ T2285] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 464.531261][ T2285] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 464.539337][ T2285] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 464.547327][ T2285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 464.555495][ T2285] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 464.563472][ T2285] 09:46:46 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r0 = socket(0x8, 0x5, 0xbf) (async, rerun: 32) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1d, 0x8, 0x7, 0x61, 0x12, 0x1, 0x289b914d, '\x00', 0x0, r1, 0x3, 0x4, 0x4}, 0x48) (async) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) 09:46:46 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 09:46:46 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) 09:46:46 executing program 3: write$hidraw(0xffffffffffffffff, &(0x7f00000000c0)="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", 0xff) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0xe3bc) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x9, 0xffffffe0, 0x11, "99c447d3556c75654c629abec8a8ade503fb26"}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$hidraw(0xffffffffffffffff, &(0x7f00000000c0)="6ad9ea587920729203e98256aae37b1f713efa56c25d743048e06d1af5b60c4f3a96af2b113d056a0ce20d53f2280e95ef63bf4c0b154f6d5e8715eca289b1b08415e1b11e76550009f5677731e7c70c27ae79032d537943f2407d7b82132844bfc4eaf373c72e503e8791df63501cecfdd3273f8d6eb5e838d9f2ae9d5f8ec6f170089fb6b7647bc19febf71c386bc326512deb18dbfcbdc9c109d03ba3d3714833ffa3f0a90ebc66cef0d09644379768a87073df5f020e0effdd507bf76afdc380099817a56c8f61f61d9cd0503399993bb9a0e599badf40f512674618a0cd69e04bf4fbbd3b686a6f40fc4101ebb4972661a8ebd6aae5ff6660f3930791", 0xff) (async) syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCMBIS(r1, 0x5416, 0x0) (async) ioctl$VT_ACTIVATE(r1, 0x5606, 0xe3bc) (async) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCMBIS(r2, 0x5416, 0x0) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x9, 0xffffffe0, 0x11, "99c447d3556c75654c629abec8a8ade503fb26"}) (async) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 09:46:46 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 25) 09:46:46 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x5452, &(0x7f0000000e00)) 09:46:46 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0xa, 0x13, 0x96, &(0x7f0000000400)}) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x3) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) recvmsg$can_j1939(r0, 0x0, 0x0) 09:46:46 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) [ 464.856118][ T2335] FAULT_INJECTION: forcing a failure. [ 464.856118][ T2335] name failslab, interval 1, probability 0, space 0, times 0 [ 464.910101][ T2335] CPU: 0 PID: 2335 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 464.920177][ T2335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 464.930256][ T2335] Call Trace: [ 464.933550][ T2335] [ 464.936499][ T2335] dump_stack_lvl+0x125/0x1b0 [ 464.941220][ T2335] should_fail_ex+0x496/0x5b0 [ 464.945942][ T2335] should_failslab+0x9/0x20 [ 464.950494][ T2335] __kmem_cache_alloc_node+0x5f/0x470 [ 464.955904][ T2335] kmalloc_trace+0x25/0xe0 [ 464.960359][ T2335] apply_wqattrs_prepare+0x137/0xa90 [ 464.965689][ T2335] ? preempt_count_sub+0x150/0x150 [ 464.970847][ T2335] apply_workqueue_attrs_locked+0xcb/0x150 [ 464.976696][ T2335] alloc_workqueue+0xc8b/0x1490 [ 464.981592][ T2335] ? workqueue_sysfs_register+0x400/0x400 [ 464.987381][ T2335] ? rcu_is_watching+0x12/0xb0 [ 464.992177][ T2335] nci_register_device+0x397/0xb80 [ 464.997331][ T2335] ? nci_init_complete_req+0x410/0x410 [ 465.002822][ T2335] ? lockdep_init_map_type+0x16d/0x7c0 [ 465.008327][ T2335] virtual_ncidev_open+0x147/0x220 [ 465.013483][ T2335] ? virtual_ncidev_read+0x4e0/0x4e0 [ 465.018811][ T2335] misc_open+0x3da/0x4c0 [ 465.023088][ T2335] ? misc_devnode+0x120/0x120 [ 465.027796][ T2335] chrdev_open+0x277/0x700 [ 465.032339][ T2335] ? __unregister_chrdev+0x100/0x100 [ 465.037655][ T2335] ? fsnotify_perm.part.0+0x25d/0x630 [ 465.043093][ T2335] ? fsnotify_perm.part.0+0x268/0x630 [ 465.048515][ T2335] do_dentry_open+0x88b/0x1730 [ 465.053324][ T2335] ? __unregister_chrdev+0x100/0x100 [ 465.058639][ T2335] ? may_open+0x1f2/0x400 [ 465.063004][ T2335] path_openat+0x19af/0x29c0 [ 465.067622][ T2335] ? path_lookupat+0x770/0x770 [ 465.072429][ T2335] do_filp_open+0x1de/0x430 [ 465.076967][ T2335] ? may_open_dev+0xf0/0xf0 [ 465.081495][ T2335] ? expand_files+0x442/0x910 [ 465.086211][ T2335] ? _raw_spin_unlock+0x28/0x40 [ 465.091095][ T2335] ? alloc_fd+0x2da/0x6c0 [ 465.095459][ T2335] do_sys_openat2+0x176/0x1e0 [ 465.100167][ T2335] ? build_open_flags+0x690/0x690 [ 465.105223][ T2335] __x64_sys_openat+0x175/0x210 [ 465.110108][ T2335] ? __ia32_sys_open+0x1e0/0x1e0 [ 465.115079][ T2335] ? ksys_write+0x1a7/0x250 [ 465.119617][ T2335] ? rcu_is_watching+0x12/0xb0 [ 465.124415][ T2335] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 465.130444][ T2335] do_syscall_64+0x38/0xb0 [ 465.134922][ T2335] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 465.140864][ T2335] RIP: 0033:0x7fafba27cae9 [ 465.145306][ T2335] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 465.164940][ T2335] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.173473][ T2335] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 465.181478][ T2335] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 465.189479][ T2335] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 465.197480][ T2335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:46:47 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) 09:46:47 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) (async) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0xa, 0x13, 0x96, &(0x7f0000000400)}) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x3) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) recvmsg$can_j1939(r0, 0x0, 0x0) 09:46:47 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x3, 0x3, 0x1c5, &(0x7f0000000440)}) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000140)={0x2, 0x0, 0x1, 0x3}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000200)) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000000)=""/156) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000840)={0x1f, "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"}) [ 465.205476][ T2335] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 465.213485][ T2335] 09:46:47 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) (rerun: 32) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) (async) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x3, 0x3, 0x1c5, &(0x7f0000000440)}) (async) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000140)={0x2, 0x0, 0x1, 0x3}) (async) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000200)) (async) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000000)=""/156) (async) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000840)={0x1f, "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"}) 09:46:47 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f00000000c0)) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x5, 0x7add6d6f, 0x32c52094, 0x425, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x4, 0x4, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r2, 0x4b36) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r3, 0x5416, 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0x141, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x8, 0x10, &(0x7f0000000680), &(0x7f0000000100), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r4, 0x0) accept4$phonet_pipe(r4, 0x0, 0x0, 0x80000) 09:46:47 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x5460, &(0x7f0000000e00)) 09:46:47 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0xa, 0x13, 0x96, &(0x7f0000000400)}) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, 0x0) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x3) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) recvmsg$can_j1939(r0, 0x0, 0x0) 09:46:47 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) r2 = syz_open_dev$hiddev(&(0x7f0000000180), 0x1, 0x300000) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f00000001c0)={0x1, 0x1, 0x71}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000280)="aff9486cf11eaaebcba8e0c8d9fc96b83461a5b3493c2cf870d92dc6bcf2c88e802e4a14a90116af6306921b004f60ef189f9d3b30b75e4eb549089e1ffbb95ad6b344df074f4977f7bdf2b366d651e231df7f88510a509f8cad3a2f325dbe66c99502e93445c663bd3a928e9af7a4a44c1509d147c873db3a2567b21054f46cb7da8873122f243429759184e6a98add6b597843cec1060848817bbcf8a462277055d82310c12a4eefe1020620373659a1b6785c0f4a153ff4d01c508f379770548377dd642a285827e9f7a23c0c") r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000100)) 09:46:47 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 26) 09:46:47 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f00000000c0)) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x5, 0x7add6d6f, 0x32c52094, 0x425, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x4, 0x4, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r2, 0x4b36) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r3, 0x5416, 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0x0) (async, rerun: 64) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (rerun: 64) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) (async, rerun: 32) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0x141, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x8, 0x10, &(0x7f0000000680), &(0x7f0000000100), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r4, 0x0) accept4$phonet_pipe(r4, 0x0, 0x0, 0x80000) 09:46:47 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x3, 0x3, 0x1c5, &(0x7f0000000440)}) (async, rerun: 64) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000140)={0x2, 0x0, 0x1, 0x3}) (rerun: 64) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async, rerun: 32) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000200)) (async, rerun: 32) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000000)=""/156) (async) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000840)={0x1f, "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"}) 09:46:47 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x6054, &(0x7f0000000e00)) 09:46:47 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f00000000c0)) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x5, 0x7add6d6f, 0x32c52094, 0x425, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x4, 0x4, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r2, 0x4b36) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r3, 0x5416, 0x0) (async) ioctl$VT_ACTIVATE(r3, 0x5606, 0x0) (async) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0x141, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x8, 0x10, &(0x7f0000000680), &(0x7f0000000100), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r4, 0x0) (async) accept4$phonet_pipe(r4, 0x0, 0x0, 0x80000) [ 465.536349][ T2389] FAULT_INJECTION: forcing a failure. [ 465.536349][ T2389] name failslab, interval 1, probability 0, space 0, times 0 [ 465.556240][ T2389] CPU: 0 PID: 2389 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 465.566460][ T2389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 465.576725][ T2389] Call Trace: [ 465.580021][ T2389] [ 465.582967][ T2389] dump_stack_lvl+0x125/0x1b0 [ 465.587685][ T2389] should_fail_ex+0x496/0x5b0 [ 465.592577][ T2389] should_failslab+0x9/0x20 [ 465.597155][ T2389] __kmem_cache_alloc_node+0x5f/0x470 [ 465.602564][ T2389] ? alloc_workqueue+0xc80/0x1490 [ 465.607805][ T2389] ? apply_wqattrs_prepare+0xff/0xa90 [ 465.613217][ T2389] __kmalloc+0x4f/0x100 [ 465.617421][ T2389] apply_wqattrs_prepare+0xff/0xa90 [ 465.623007][ T2389] ? preempt_count_sub+0x150/0x150 [ 465.628340][ T2389] apply_workqueue_attrs_locked+0xcb/0x150 09:46:47 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) [ 465.634389][ T2389] alloc_workqueue+0xc8b/0x1490 [ 465.639290][ T2389] ? workqueue_sysfs_register+0x400/0x400 [ 465.645155][ T2389] ? rcu_is_watching+0x12/0xb0 [ 465.649999][ T2389] nci_register_device+0x397/0xb80 [ 465.655160][ T2389] ? nci_init_complete_req+0x410/0x410 [ 465.660659][ T2389] ? lockdep_init_map_type+0x16d/0x7c0 [ 465.666163][ T2389] virtual_ncidev_open+0x147/0x220 [ 465.671320][ T2389] ? virtual_ncidev_read+0x4e0/0x4e0 [ 465.676657][ T2389] misc_open+0x3da/0x4c0 [ 465.681034][ T2389] ? misc_devnode+0x120/0x120 09:46:47 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) [ 465.685844][ T2389] chrdev_open+0x277/0x700 [ 465.690297][ T2389] ? __unregister_chrdev+0x100/0x100 [ 465.696857][ T2389] ? fsnotify_perm.part.0+0x25d/0x630 [ 465.702283][ T2389] ? fsnotify_perm.part.0+0x268/0x630 [ 465.707781][ T2389] do_dentry_open+0x88b/0x1730 [ 465.712575][ T2389] ? __unregister_chrdev+0x100/0x100 [ 465.717890][ T2389] ? may_open+0x1f2/0x400 [ 465.722259][ T2389] path_openat+0x19af/0x29c0 [ 465.726882][ T2389] ? path_lookupat+0x770/0x770 [ 465.731780][ T2389] do_filp_open+0x1de/0x430 09:46:47 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) [ 465.736313][ T2389] ? may_open_dev+0xf0/0xf0 [ 465.740934][ T2389] ? expand_files+0x442/0x910 [ 465.745651][ T2389] ? _raw_spin_unlock+0x28/0x40 [ 465.750540][ T2389] ? alloc_fd+0x2da/0x6c0 [ 465.754993][ T2389] do_sys_openat2+0x176/0x1e0 [ 465.759706][ T2389] ? build_open_flags+0x690/0x690 [ 465.764851][ T2389] __x64_sys_openat+0x175/0x210 [ 465.769740][ T2389] ? __ia32_sys_open+0x1e0/0x1e0 [ 465.774716][ T2389] ? ksys_write+0x1a7/0x250 [ 465.779254][ T2389] ? rcu_is_watching+0x12/0xb0 [ 465.784220][ T2389] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 465.790238][ T2389] do_syscall_64+0x38/0xb0 [ 465.794961][ T2389] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 465.800897][ T2389] RIP: 0033:0x7fafba27cae9 [ 465.805340][ T2389] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 465.825178][ T2389] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 09:46:47 executing program 4: getgid() getgid() recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000280), &(0x7f0000001300)=0x4) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0x1}, 0xfd}, 0x18, &(0x7f0000000140)={&(0x7f0000000040)="ae8cad7ddbbd9c85dc8ef9e99eb771451ed1382ebe6940dbbab85eecc0955320ab8c2694e01d33900dbd46bb79a68dedeb0bfc9ec34d181ab24cd13d16523fb5201a220621ed7ee1cbb9e64749892f364d024bf0c3c429f0fcb4bec77ba571aa15bf1dff19535cfe2e2015e9c7cd69671f375a7279c23bada164ccb885a278a342239cbcc4fca6e3d7c80aa53050d8d355774af74f9cf5657e7f1d1b4b708cc24e6be6a1016774b84ce01bad948d9176f0f9020bcec48d7680a1d1e0b38dd02de4358ce831044e47b81321b63b3f4fc6a402c7abfbb7aad761404d42cb7e237076f01b1d3f525676", 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x91) recvmsg$can_j1939(r0, &(0x7f0000001500)={&(0x7f00000001c0)=@phonet, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001580)=""/122, 0xb5}, {&(0x7f0000000240)=""/49, 0x30}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001600)=""/171, 0x9c}], 0x5, &(0x7f0000001400)=""/209, 0xfffffe1d}, 0x2021) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) syz_open_pts(r1, 0x80080) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x6) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000001540), 0x4) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000000000, 0x40281) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x1, 0x401, 0x401}) [ 465.833618][ T2389] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 465.841788][ T2389] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 465.849787][ T2389] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 465.857866][ T2389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.866038][ T2389] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 465.874042][ T2389] 09:46:47 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 09:46:47 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) [ 465.947912][ T27] audit: type=1400 audit(1693734407.740:146): avc: denied { getopt } for pid=2417 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 465.983666][ T27] audit: type=1400 audit(1693734407.740:147): avc: denied { write } for pid=2417 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 09:46:47 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) r2 = syz_open_dev$hiddev(&(0x7f0000000180), 0x1, 0x300000) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f00000001c0)={0x1, 0x1, 0x71}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000280)="aff9486cf11eaaebcba8e0c8d9fc96b83461a5b3493c2cf870d92dc6bcf2c88e802e4a14a90116af6306921b004f60ef189f9d3b30b75e4eb549089e1ffbb95ad6b344df074f4977f7bdf2b366d651e231df7f88510a509f8cad3a2f325dbe66c99502e93445c663bd3a928e9af7a4a44c1509d147c873db3a2567b21054f46cb7da8873122f243429759184e6a98add6b597843cec1060848817bbcf8a462277055d82310c12a4eefe1020620373659a1b6785c0f4a153ff4d01c508f379770548377dd642a285827e9f7a23c0c") (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000100)) 09:46:47 executing program 4: getgid() (async) getgid() recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000280), &(0x7f0000001300)=0x4) (async) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0x1}, 0xfd}, 0x18, &(0x7f0000000140)={&(0x7f0000000040)="ae8cad7ddbbd9c85dc8ef9e99eb771451ed1382ebe6940dbbab85eecc0955320ab8c2694e01d33900dbd46bb79a68dedeb0bfc9ec34d181ab24cd13d16523fb5201a220621ed7ee1cbb9e64749892f364d024bf0c3c429f0fcb4bec77ba571aa15bf1dff19535cfe2e2015e9c7cd69671f375a7279c23bada164ccb885a278a342239cbcc4fca6e3d7c80aa53050d8d355774af74f9cf5657e7f1d1b4b708cc24e6be6a1016774b84ce01bad948d9176f0f9020bcec48d7680a1d1e0b38dd02de4358ce831044e47b81321b63b3f4fc6a402c7abfbb7aad761404d42cb7e237076f01b1d3f525676", 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x91) (async) recvmsg$can_j1939(r0, &(0x7f0000001500)={&(0x7f00000001c0)=@phonet, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001580)=""/122, 0xb5}, {&(0x7f0000000240)=""/49, 0x30}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001600)=""/171, 0x9c}], 0x5, &(0x7f0000001400)=""/209, 0xfffffe1d}, 0x2021) (async) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) syz_open_pts(r1, 0x80080) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r1, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) (async) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000001540), 0x4) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000000000, 0x40281) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x1, 0x401, 0x401}) 09:46:47 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 27) 09:46:47 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x8933, &(0x7f0000000e00)) [ 466.022733][ T27] audit: type=1400 audit(1693734407.740:148): avc: denied { read } for pid=2417 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 09:46:47 executing program 4: getgid() (async) getgid() (async) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000280), &(0x7f0000001300)=0x4) (async) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0x1}, 0xfd}, 0x18, &(0x7f0000000140)={&(0x7f0000000040)="ae8cad7ddbbd9c85dc8ef9e99eb771451ed1382ebe6940dbbab85eecc0955320ab8c2694e01d33900dbd46bb79a68dedeb0bfc9ec34d181ab24cd13d16523fb5201a220621ed7ee1cbb9e64749892f364d024bf0c3c429f0fcb4bec77ba571aa15bf1dff19535cfe2e2015e9c7cd69671f375a7279c23bada164ccb885a278a342239cbcc4fca6e3d7c80aa53050d8d355774af74f9cf5657e7f1d1b4b708cc24e6be6a1016774b84ce01bad948d9176f0f9020bcec48d7680a1d1e0b38dd02de4358ce831044e47b81321b63b3f4fc6a402c7abfbb7aad761404d42cb7e237076f01b1d3f525676", 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x91) (async) recvmsg$can_j1939(r0, &(0x7f0000001500)={&(0x7f00000001c0)=@phonet, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001580)=""/122, 0xb5}, {&(0x7f0000000240)=""/49, 0x30}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001600)=""/171, 0x9c}], 0x5, &(0x7f0000001400)=""/209, 0xfffffe1d}, 0x2021) (async) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) syz_open_pts(r1, 0x80080) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async, rerun: 32) ioctl$TCXONC(r1, 0x540a, 0x3) (async, rerun: 32) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) (async, rerun: 32) ioctl$KDSKBLED(r1, 0x4b65, 0x6) (async, rerun: 32) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) (async) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000001540), 0x4) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000000000, 0x40281) (rerun: 64) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x1, 0x401, 0x401}) (rerun: 32) 09:46:47 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:47 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x100000) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000000)) sched_setparam(0xffffffffffffffff, &(0x7f0000000080)=0xfffffff7) r0 = gettid() socket$phonet_pipe(0x23, 0x5, 0x2) getpriority(0x1, r0) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000040)) sched_setparam(r0, &(0x7f00000000c0)=0xebd) [ 466.147814][ T2436] FAULT_INJECTION: forcing a failure. [ 466.147814][ T2436] name failslab, interval 1, probability 0, space 0, times 0 [ 466.208777][ T2436] CPU: 0 PID: 2436 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 466.218818][ T2436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 466.228898][ T2436] Call Trace: [ 466.232203][ T2436] [ 466.235170][ T2436] dump_stack_lvl+0x125/0x1b0 [ 466.240068][ T2436] should_fail_ex+0x496/0x5b0 [ 466.244983][ T2436] should_failslab+0x9/0x20 [ 466.249528][ T2436] __kmem_cache_alloc_node+0x5f/0x470 [ 466.254942][ T2436] kmalloc_trace+0x25/0xe0 [ 466.259402][ T2436] apply_wqattrs_prepare+0x137/0xa90 [ 466.264735][ T2436] ? preempt_count_sub+0x150/0x150 [ 466.269895][ T2436] apply_workqueue_attrs_locked+0xcb/0x150 [ 466.275746][ T2436] alloc_workqueue+0xc8b/0x1490 [ 466.280644][ T2436] ? workqueue_sysfs_register+0x400/0x400 [ 466.286494][ T2436] ? rcu_is_watching+0x12/0xb0 [ 466.291273][ T2436] nci_register_device+0x397/0xb80 [ 466.296400][ T2436] ? nci_init_complete_req+0x410/0x410 [ 466.301872][ T2436] ? lockdep_init_map_type+0x16d/0x7c0 [ 466.307349][ T2436] virtual_ncidev_open+0x147/0x220 [ 466.312472][ T2436] ? virtual_ncidev_read+0x4e0/0x4e0 [ 466.317770][ T2436] misc_open+0x3da/0x4c0 [ 466.322065][ T2436] ? misc_devnode+0x120/0x120 [ 466.326854][ T2436] chrdev_open+0x277/0x700 [ 466.331282][ T2436] ? __unregister_chrdev+0x100/0x100 [ 466.336587][ T2436] ? fsnotify_perm.part.0+0x25d/0x630 [ 466.342086][ T2436] ? fsnotify_perm.part.0+0x268/0x630 [ 466.347483][ T2436] do_dentry_open+0x88b/0x1730 [ 466.352343][ T2436] ? __unregister_chrdev+0x100/0x100 [ 466.357677][ T2436] ? may_open+0x1f2/0x400 [ 466.362016][ T2436] path_openat+0x19af/0x29c0 [ 466.366611][ T2436] ? path_lookupat+0x770/0x770 [ 466.371387][ T2436] do_filp_open+0x1de/0x430 [ 466.375891][ T2436] ? may_open_dev+0xf0/0xf0 [ 466.380394][ T2436] ? expand_files+0x442/0x910 [ 466.385080][ T2436] ? _raw_spin_unlock+0x28/0x40 [ 466.390073][ T2436] ? alloc_fd+0x2da/0x6c0 [ 466.394415][ T2436] do_sys_openat2+0x176/0x1e0 [ 466.399197][ T2436] ? build_open_flags+0x690/0x690 [ 466.404240][ T2436] __x64_sys_openat+0x175/0x210 [ 466.409181][ T2436] ? __ia32_sys_open+0x1e0/0x1e0 [ 466.414122][ T2436] ? ksys_write+0x1a7/0x250 [ 466.418632][ T2436] ? rcu_is_watching+0x12/0xb0 [ 466.423406][ T2436] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 466.429398][ T2436] do_syscall_64+0x38/0xb0 [ 466.433920][ T2436] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 466.440266][ T2436] RIP: 0033:0x7fafba27cae9 [ 466.444688][ T2436] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 466.464398][ T2436] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 466.472818][ T2436] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 466.480890][ T2436] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 466.489043][ T2436] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 466.497018][ T2436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:46:48 executing program 3: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x7f, 0x40, 0x7ff, 0x7, 0x18, "3643912d20c636ee2e31b22d7faa1245213fa6"}) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:48 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x100000) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000000)) sched_setparam(0xffffffffffffffff, &(0x7f0000000080)=0xfffffff7) r0 = gettid() socket$phonet_pipe(0x23, 0x5, 0x2) getpriority(0x1, r0) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000040)) sched_setparam(r0, &(0x7f00000000c0)=0xebd) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x100000) (async) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000000)) (async) sched_setparam(0xffffffffffffffff, &(0x7f0000000080)=0xfffffff7) (async) gettid() (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getpriority(0x1, r0) (async) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000040)) (async) sched_setparam(r0, &(0x7f00000000c0)=0xebd) (async) [ 466.504993][ T2436] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 466.512969][ T2436] 09:46:48 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000300)={0x8, 0xd9, 0x3f, 0x80000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'nr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x100, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1f}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8e5a}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_RINGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xffffff86}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000800}, 0x5) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x2000) bind$phonet(r4, &(0x7f0000000080)={0x23, 0xf7, 0x61, 0x7}, 0x10) prctl$PR_GET_SECUREBITS(0x1b) 09:46:48 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 28) 09:46:48 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x100000) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000000)) sched_setparam(0xffffffffffffffff, &(0x7f0000000080)=0xfffffff7) (async) r0 = gettid() socket$phonet_pipe(0x23, 0x5, 0x2) (async) getpriority(0x1, r0) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000040)) (async) sched_setparam(r0, &(0x7f00000000c0)=0xebd) [ 466.705053][ T2474] FAULT_INJECTION: forcing a failure. [ 466.705053][ T2474] name failslab, interval 1, probability 0, space 0, times 0 [ 466.718813][ T2474] CPU: 1 PID: 2474 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 466.728853][ T2474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 466.739123][ T2474] Call Trace: [ 466.742438][ T2474] [ 466.745407][ T2474] dump_stack_lvl+0x125/0x1b0 [ 466.750140][ T2474] should_fail_ex+0x496/0x5b0 [ 466.754867][ T2474] should_failslab+0x9/0x20 [ 466.759422][ T2474] kmem_cache_alloc_node+0x64/0x540 [ 466.764660][ T2474] alloc_unbound_pwq+0x41e/0xd00 [ 466.769644][ T2474] ? kasan_set_track+0x25/0x30 [ 466.774445][ T2474] apply_wqattrs_prepare+0x3be/0xa90 [ 466.779776][ T2474] apply_workqueue_attrs_locked+0xcb/0x150 [ 466.785628][ T2474] alloc_workqueue+0xc8b/0x1490 [ 466.790535][ T2474] ? workqueue_sysfs_register+0x400/0x400 [ 466.796311][ T2474] ? rcu_is_watching+0x12/0xb0 [ 466.801122][ T2474] nci_register_device+0x397/0xb80 [ 466.806280][ T2474] ? nci_init_complete_req+0x410/0x410 [ 466.811787][ T2474] ? lockdep_init_map_type+0x16d/0x7c0 [ 466.817298][ T2474] virtual_ncidev_open+0x147/0x220 [ 466.822454][ T2474] ? virtual_ncidev_read+0x4e0/0x4e0 [ 466.827790][ T2474] misc_open+0x3da/0x4c0 [ 466.832059][ T2474] ? misc_devnode+0x120/0x120 [ 466.836763][ T2474] chrdev_open+0x277/0x700 [ 466.841184][ T2474] ? __unregister_chrdev+0x100/0x100 [ 466.846470][ T2474] ? fsnotify_perm.part.0+0x25d/0x630 [ 466.851857][ T2474] ? fsnotify_perm.part.0+0x268/0x630 [ 466.857238][ T2474] do_dentry_open+0x88b/0x1730 [ 466.862092][ T2474] ? __unregister_chrdev+0x100/0x100 [ 466.867386][ T2474] ? may_open+0x1f2/0x400 [ 466.871725][ T2474] path_openat+0x19af/0x29c0 [ 466.876323][ T2474] ? path_lookupat+0x770/0x770 [ 466.881188][ T2474] do_filp_open+0x1de/0x430 [ 466.885695][ T2474] ? may_open_dev+0xf0/0xf0 [ 466.890198][ T2474] ? expand_files+0x442/0x910 [ 466.894906][ T2474] ? _raw_spin_unlock+0x28/0x40 [ 466.900550][ T2474] ? alloc_fd+0x2da/0x6c0 [ 466.904894][ T2474] do_sys_openat2+0x176/0x1e0 [ 466.909616][ T2474] ? build_open_flags+0x690/0x690 [ 466.914913][ T2474] __x64_sys_openat+0x175/0x210 [ 466.919772][ T2474] ? __ia32_sys_open+0x1e0/0x1e0 [ 466.924715][ T2474] ? ksys_write+0x1a7/0x250 [ 466.929227][ T2474] ? rcu_is_watching+0x12/0xb0 [ 466.934014][ T2474] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 466.939999][ T2474] do_syscall_64+0x38/0xb0 [ 466.944428][ T2474] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 466.950336][ T2474] RIP: 0033:0x7fafba27cae9 [ 466.954767][ T2474] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 466.974641][ T2474] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 466.983994][ T2474] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 466.991968][ T2474] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 466.999948][ T2474] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 467.007919][ T2474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.015893][ T2474] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 467.023875][ T2474] 09:46:48 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) r2 = syz_open_dev$hiddev(&(0x7f0000000180), 0x1, 0x300000) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f00000001c0)={0x1, 0x1, 0x71}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000280)="aff9486cf11eaaebcba8e0c8d9fc96b83461a5b3493c2cf870d92dc6bcf2c88e802e4a14a90116af6306921b004f60ef189f9d3b30b75e4eb549089e1ffbb95ad6b344df074f4977f7bdf2b366d651e231df7f88510a509f8cad3a2f325dbe66c99502e93445c663bd3a928e9af7a4a44c1509d147c873db3a2567b21054f46cb7da8873122f243429759184e6a98add6b597843cec1060848817bbcf8a462277055d82310c12a4eefe1020620373659a1b6785c0f4a153ff4d01c508f379770548377dd642a285827e9f7a23c0c") r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000100)) 09:46:48 executing program 3: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x7f, 0x40, 0x7ff, 0x7, 0x18, "3643912d20c636ee2e31b22d7faa1245213fa6"}) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:48 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x1000000, &(0x7f0000000e00)) 09:46:48 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:46:48 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000300)={0x8, 0xd9, 0x3f, 0x80000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'nr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x100, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1f}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8e5a}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_RINGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xffffff86}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000800}, 0x5) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x2000) bind$phonet(r4, &(0x7f0000000080)={0x23, 0xf7, 0x61, 0x7}, 0x10) prctl$PR_GET_SECUREBITS(0x1b) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) (async) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000300)={0x8, 0xd9, 0x3f, 0x80000}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'nr0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00'}) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x100, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1f}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8e5a}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_RINGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xffffff86}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000800}, 0x5) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x2000) (async) bind$phonet(r4, &(0x7f0000000080)={0x23, 0xf7, 0x61, 0x7}, 0x10) (async) prctl$PR_GET_SECUREBITS(0x1b) (async) 09:46:48 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 29) 09:46:49 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:46:49 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000300)={0x8, 0xd9, 0x3f, 0x80000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'nr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x100, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1f}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8e5a}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_RINGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xffffff86}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000800}, 0x5) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x2000) bind$phonet(r4, &(0x7f0000000080)={0x23, 0xf7, 0x61, 0x7}, 0x10) prctl$PR_GET_SECUREBITS(0x1b) (async) prctl$PR_GET_SECUREBITS(0x1b) 09:46:49 executing program 3: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x7f, 0x40, 0x7ff, 0x7, 0x18, "3643912d20c636ee2e31b22d7faa1245213fa6"}) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) [ 467.280296][ T2495] FAULT_INJECTION: forcing a failure. [ 467.280296][ T2495] name failslab, interval 1, probability 0, space 0, times 0 [ 467.321640][ T2495] CPU: 1 PID: 2495 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 467.331871][ T2495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 467.342046][ T2495] Call Trace: [ 467.345351][ T2495] [ 467.348303][ T2495] dump_stack_lvl+0x125/0x1b0 [ 467.353027][ T2495] should_fail_ex+0x496/0x5b0 [ 467.357766][ T2495] should_failslab+0x9/0x20 [ 467.362401][ T2495] __kmem_cache_alloc_node+0x5f/0x470 [ 467.367811][ T2495] ? lockdep_init_map_type+0x16d/0x7c0 [ 467.373503][ T2495] ? worker_thread+0x1290/0x1290 [ 467.378662][ T2495] kmalloc_trace+0x25/0xe0 [ 467.383115][ T2495] __kthread_create_on_node+0xcb/0x400 [ 467.388616][ T2495] ? kthread_parkme+0xa0/0xa0 [ 467.393424][ T2495] ? worker_thread+0x1290/0x1290 [ 467.398402][ T2495] kthread_create_on_node+0xc8/0x100 [ 467.403801][ T2495] ? __kthread_create_on_node+0x400/0x400 [ 467.409643][ T2495] ? kasan_set_track+0x25/0x30 [ 467.414443][ T2495] init_rescuer+0xce/0x1f0 [ 467.418990][ T2495] alloc_workqueue+0xd35/0x1490 [ 467.424057][ T2495] ? workqueue_sysfs_register+0x400/0x400 [ 467.429806][ T2495] ? rcu_is_watching+0x12/0xb0 [ 467.434665][ T2495] nci_register_device+0x397/0xb80 [ 467.439787][ T2495] ? nci_init_complete_req+0x410/0x410 [ 467.445252][ T2495] ? lockdep_init_map_type+0x16d/0x7c0 [ 467.450810][ T2495] virtual_ncidev_open+0x147/0x220 [ 467.455940][ T2495] ? virtual_ncidev_read+0x4e0/0x4e0 [ 467.461240][ T2495] misc_open+0x3da/0x4c0 [ 467.465575][ T2495] ? misc_devnode+0x120/0x120 [ 467.470254][ T2495] chrdev_open+0x277/0x700 [ 467.474959][ T2495] ? __unregister_chrdev+0x100/0x100 [ 467.480360][ T2495] ? fsnotify_perm.part.0+0x25d/0x630 [ 467.485759][ T2495] ? fsnotify_perm.part.0+0x268/0x630 [ 467.491235][ T2495] do_dentry_open+0x88b/0x1730 [ 467.496002][ T2495] ? __unregister_chrdev+0x100/0x100 [ 467.501289][ T2495] ? may_open+0x1f2/0x400 [ 467.505678][ T2495] path_openat+0x19af/0x29c0 [ 467.510271][ T2495] ? path_lookupat+0x770/0x770 [ 467.515052][ T2495] do_filp_open+0x1de/0x430 [ 467.519602][ T2495] ? may_open_dev+0xf0/0xf0 [ 467.524119][ T2495] ? expand_files+0x442/0x910 [ 467.528809][ T2495] ? _raw_spin_unlock+0x28/0x40 [ 467.533668][ T2495] ? alloc_fd+0x2da/0x6c0 [ 467.538007][ T2495] do_sys_openat2+0x176/0x1e0 [ 467.542698][ T2495] ? build_open_flags+0x690/0x690 [ 467.547728][ T2495] __x64_sys_openat+0x175/0x210 [ 467.552671][ T2495] ? __ia32_sys_open+0x1e0/0x1e0 [ 467.557614][ T2495] ? ksys_write+0x1a7/0x250 [ 467.562133][ T2495] ? rcu_is_watching+0x12/0xb0 [ 467.566895][ T2495] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 467.572889][ T2495] do_syscall_64+0x38/0xb0 [ 467.577329][ T2495] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 467.583234][ T2495] RIP: 0033:0x7fafba27cae9 [ 467.587656][ T2495] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 467.607441][ T2495] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 09:46:49 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x1630880, &(0x7f0000000e00)) 09:46:49 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, 0x0, 0x40) 09:46:49 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 467.615942][ T2495] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 467.624009][ T2495] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 467.632686][ T2495] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 467.640744][ T2495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.648714][ T2495] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 467.656690][ T2495] 09:46:49 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) [ 467.676917][ T2495] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -ENOMEM 09:46:49 executing program 5: r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r2, 0x4b36) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) sendto$phonet(r2, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r2, 0x58, &(0x7f0000000bc0)}, 0x10) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x4001) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$VT_RESIZEX(r3, 0x560a, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000540)={0x3, 0x2, 0x7fff}) ioctl$KDSKBLED(r3, 0x4b65, 0x6) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xfc, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_USERDATA={0xaf, 0xc, "b00050dbd658873b5c6c2bf996a47f277a579a677a91753f9a01e0f855068390be99d15111d5b9c7d7cd8cd33b375422b7aa7b16554c94d4595228bf131d945905917d00aceef17cdd950ece5e8c28333b22b57148d53c6abede8b502ff3e74b0f8f8e02c44b598e96a246bcec0651dda4614df0598fce4d9caaad688bcc3230395751b898474c1b8aa8236e8d1d895fc441c483561cadc949de429e4087ff492fd5e657647a29106e5ce8"}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14}]}]}, 0xfc}}, 0x40) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) r4 = gettid() getpriority(0x1, r4) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r0, 0x4) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f00000000c0)=0x9) 09:46:49 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 30) 09:46:49 executing program 5: r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r2, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) (async) sendto$phonet(r2, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r2, 0x58, &(0x7f0000000bc0)}, 0x10) (async) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x4001) (async) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r3, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r3, 0x560a, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000540)={0x3, 0x2, 0x7fff}) (async) ioctl$KDSKBLED(r3, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) (async) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xfc, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_USERDATA={0xaf, 0xc, "b00050dbd658873b5c6c2bf996a47f277a579a677a91753f9a01e0f855068390be99d15111d5b9c7d7cd8cd33b375422b7aa7b16554c94d4595228bf131d945905917d00aceef17cdd950ece5e8c28333b22b57148d53c6abede8b502ff3e74b0f8f8e02c44b598e96a246bcec0651dda4614df0598fce4d9caaad688bcc3230395751b898474c1b8aa8236e8d1d895fc441c483561cadc949de429e4087ff492fd5e657647a29106e5ce8"}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14}]}]}, 0xfc}}, 0x40) (async) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) (async) r4 = gettid() getpriority(0x1, r4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r0, 0x4) (async) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f00000000c0)=0x9) 09:46:49 executing program 5: r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r2, 0x4b36) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) sendto$phonet(r2, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r2, 0x58, &(0x7f0000000bc0)}, 0x10) (async) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x4001) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r3, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r3, 0x560a, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000540)={0x3, 0x2, 0x7fff}) ioctl$KDSKBLED(r3, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) (async) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xfc, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_USERDATA={0xaf, 0xc, "b00050dbd658873b5c6c2bf996a47f277a579a677a91753f9a01e0f855068390be99d15111d5b9c7d7cd8cd33b375422b7aa7b16554c94d4595228bf131d945905917d00aceef17cdd950ece5e8c28333b22b57148d53c6abede8b502ff3e74b0f8f8e02c44b598e96a246bcec0651dda4614df0598fce4d9caaad688bcc3230395751b898474c1b8aa8236e8d1d895fc441c483561cadc949de429e4087ff492fd5e657647a29106e5ce8"}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14}]}]}, 0xfc}}, 0x40) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) r4 = gettid() getpriority(0x1, r4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r0, 0x4) (async) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f00000000c0)=0x9) 09:46:49 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0xffffffffffffff2f) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0x7f, 0x4, 0x8, 0xfffd, 0x51bd}) 09:46:49 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, 0x0, 0x40) 09:46:49 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x1660880, &(0x7f0000000e00)) [ 467.690871][ T2498] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 467.898955][ T2532] FAULT_INJECTION: forcing a failure. [ 467.898955][ T2532] name failslab, interval 1, probability 0, space 0, times 0 [ 467.921954][ T2532] CPU: 1 PID: 2532 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 467.931975][ T2532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 467.942061][ T2532] Call Trace: [ 467.945344][ T2532] [ 467.948311][ T2532] dump_stack_lvl+0x125/0x1b0 [ 467.953029][ T2532] should_fail_ex+0x496/0x5b0 [ 467.957829][ T2532] should_failslab+0x9/0x20 [ 467.962353][ T2532] __kmem_cache_alloc_node+0x5f/0x470 [ 467.968591][ T2532] kmalloc_trace+0x25/0xe0 [ 467.973024][ T2532] alloc_workqueue+0x16f/0x1490 [ 467.977893][ T2532] ? lock_sync+0x190/0x190 [ 467.983271][ T2532] ? workqueue_sysfs_register+0x400/0x400 [ 467.989021][ T2532] ? rcu_is_watching+0x12/0xb0 [ 467.993786][ T2532] nci_register_device+0x514/0xb80 [ 467.999007][ T2532] ? nci_init_complete_req+0x410/0x410 [ 468.004562][ T2532] ? lockdep_init_map_type+0x16d/0x7c0 [ 468.010055][ T2532] virtual_ncidev_open+0x147/0x220 [ 468.015203][ T2532] ? virtual_ncidev_read+0x4e0/0x4e0 [ 468.020527][ T2532] misc_open+0x3da/0x4c0 [ 468.024796][ T2532] ? misc_devnode+0x120/0x120 [ 468.029568][ T2532] chrdev_open+0x277/0x700 [ 468.034008][ T2532] ? __unregister_chrdev+0x100/0x100 [ 468.039322][ T2532] ? fsnotify_perm.part.0+0x25d/0x630 [ 468.044708][ T2532] ? fsnotify_perm.part.0+0x268/0x630 [ 468.050129][ T2532] do_dentry_open+0x88b/0x1730 [ 468.054905][ T2532] ? __unregister_chrdev+0x100/0x100 [ 468.060196][ T2532] ? may_open+0x1f2/0x400 [ 468.064537][ T2532] path_openat+0x19af/0x29c0 [ 468.069154][ T2532] ? path_lookupat+0x770/0x770 [ 468.073967][ T2532] do_filp_open+0x1de/0x430 [ 468.078497][ T2532] ? may_open_dev+0xf0/0xf0 [ 468.083005][ T2532] ? expand_files+0x442/0x910 [ 468.087693][ T2532] ? _raw_spin_unlock+0x28/0x40 [ 468.092552][ T2532] ? alloc_fd+0x2da/0x6c0 [ 468.096975][ T2532] do_sys_openat2+0x176/0x1e0 [ 468.101660][ T2532] ? build_open_flags+0x690/0x690 [ 468.106776][ T2532] __x64_sys_openat+0x175/0x210 [ 468.111997][ T2532] ? __ia32_sys_open+0x1e0/0x1e0 [ 468.117048][ T2532] ? ksys_write+0x1a7/0x250 [ 468.121829][ T2532] ? rcu_is_watching+0x12/0xb0 [ 468.126622][ T2532] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 468.133594][ T2532] do_syscall_64+0x38/0xb0 [ 468.138026][ T2532] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 468.143955][ T2532] RIP: 0033:0x7fafba27cae9 [ 468.148394][ T2532] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 468.168154][ T2532] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 468.176573][ T2532] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 468.184575][ T2532] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c 09:46:49 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) accept$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) accept4$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80400) 09:46:50 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) [ 468.192569][ T2532] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 468.200546][ T2532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.208519][ T2532] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 468.216497][ T2532] 09:46:50 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) accept$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) (async) accept4$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80400) 09:46:50 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, 0x0, 0x40) 09:46:50 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0xffffffffffffff2f) (async, rerun: 32) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0x7f, 0x4, 0x8, 0xfffd, 0x51bd}) (rerun: 32) 09:46:50 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0xffffffffffffff2f) (async) read$hidraw(0xffffffffffffffff, 0x0, 0xffffffffffffff2f) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0x7f, 0x4, 0x8, 0xfffd, 0x51bd}) 09:46:50 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 31) 09:46:50 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x1760880, &(0x7f0000000e00)) 09:46:50 executing program 4: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000100)={0x0, "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"}) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000040)="084a89c7dad093705586881bf689e38f55ff089316257e28287067c4a0eb9fa055c576942b38fa42b415ec60dd0f1446f9feefe568d2869832f36eed4ab644f1670380e11d593835a4207c813c08118aae7d08a30bb324159904054946ba3b731ebe75b7a4606b891bb17f228765b8a8e358d5ba2861d4a7308982160b4b6bd2feca23bc1620d85a203243724bfc585ddf8da419e9a8625cce3c215a6a210fb91230ae2cce49124c2dd8f7580b78d273c45b6367", 0xb4) 09:46:50 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) accept$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) accept4$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80400) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) accept$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) (async) accept4$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80400) (async) 09:46:50 executing program 3: syz_open_dev$hidraw(&(0x7f0000000000), 0x8366, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r2, 0x4b36) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r3, 0x0) read$hidraw(r3, 0x0, 0x0) 09:46:50 executing program 4: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000100)={0x0, "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"}) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000040)="084a89c7dad093705586881bf689e38f55ff089316257e28287067c4a0eb9fa055c576942b38fa42b415ec60dd0f1446f9feefe568d2869832f36eed4ab644f1670380e11d593835a4207c813c08118aae7d08a30bb324159904054946ba3b731ebe75b7a4606b891bb17f228765b8a8e358d5ba2861d4a7308982160b4b6bd2feca23bc1620d85a203243724bfc585ddf8da419e9a8625cce3c215a6a210fb91230ae2cce49124c2dd8f7580b78d273c45b6367", 0xb4) [ 468.491722][ T2571] FAULT_INJECTION: forcing a failure. [ 468.491722][ T2571] name failslab, interval 1, probability 0, space 0, times 0 [ 468.523439][ T2571] CPU: 0 PID: 2571 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 09:46:50 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 468.533550][ T2571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 468.543642][ T2571] Call Trace: [ 468.546963][ T2571] [ 468.550088][ T2571] dump_stack_lvl+0x125/0x1b0 [ 468.554815][ T2571] should_fail_ex+0x496/0x5b0 [ 468.559538][ T2571] should_failslab+0x9/0x20 [ 468.564075][ T2571] __kmem_cache_alloc_node+0x5f/0x470 [ 468.569462][ T2571] kmalloc_trace+0x25/0xe0 [ 468.573898][ T2571] alloc_workqueue+0x1d4/0x1490 [ 468.578760][ T2571] ? lock_sync+0x190/0x190 [ 468.583192][ T2571] ? workqueue_sysfs_register+0x400/0x400 [ 468.588925][ T2571] ? rcu_is_watching+0x12/0xb0 [ 468.593779][ T2571] nci_register_device+0x514/0xb80 [ 468.598899][ T2571] ? nci_init_complete_req+0x410/0x410 [ 468.604364][ T2571] ? lockdep_init_map_type+0x16d/0x7c0 [ 468.609880][ T2571] virtual_ncidev_open+0x147/0x220 [ 468.615009][ T2571] ? virtual_ncidev_read+0x4e0/0x4e0 [ 468.620306][ T2571] misc_open+0x3da/0x4c0 [ 468.624561][ T2571] ? misc_devnode+0x120/0x120 [ 468.629419][ T2571] chrdev_open+0x277/0x700 [ 468.633840][ T2571] ? __unregister_chrdev+0x100/0x100 [ 468.639128][ T2571] ? fsnotify_perm.part.0+0x25d/0x630 [ 468.644516][ T2571] ? fsnotify_perm.part.0+0x268/0x630 [ 468.649903][ T2571] do_dentry_open+0x88b/0x1730 [ 468.654847][ T2571] ? __unregister_chrdev+0x100/0x100 [ 468.660226][ T2571] ? may_open+0x1f2/0x400 [ 468.664610][ T2571] path_openat+0x19af/0x29c0 [ 468.669203][ T2571] ? path_lookupat+0x770/0x770 [ 468.673979][ T2571] do_filp_open+0x1de/0x430 [ 468.678481][ T2571] ? may_open_dev+0xf0/0xf0 [ 468.682986][ T2571] ? expand_files+0x442/0x910 [ 468.687673][ T2571] ? _raw_spin_unlock+0x28/0x40 [ 468.692531][ T2571] ? alloc_fd+0x2da/0x6c0 [ 468.696865][ T2571] do_sys_openat2+0x176/0x1e0 [ 468.701552][ T2571] ? build_open_flags+0x690/0x690 [ 468.706583][ T2571] __x64_sys_openat+0x175/0x210 [ 468.711440][ T2571] ? __ia32_sys_open+0x1e0/0x1e0 [ 468.716384][ T2571] ? ksys_write+0x1a7/0x250 [ 468.720894][ T2571] ? rcu_is_watching+0x12/0xb0 [ 468.725657][ T2571] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 468.731729][ T2571] do_syscall_64+0x38/0xb0 [ 468.736170][ T2571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 468.742161][ T2571] RIP: 0033:0x7fafba27cae9 [ 468.746577][ T2571] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 468.766193][ T2571] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 468.774611][ T2571] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 468.782585][ T2571] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 468.790555][ T2571] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 468.798531][ T2571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.806512][ T2571] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 468.814578][ T2571] 09:46:50 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) 09:46:50 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 09:46:50 executing program 3: syz_open_dev$hidraw(&(0x7f0000000000), 0x8366, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r2, 0x4b36) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r3, 0x0) read$hidraw(r3, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x8366, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r2, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r3, 0x0) (async) read$hidraw(r3, 0x0, 0x0) (async) 09:46:50 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 32) 09:46:50 executing program 4: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000100)={0x0, "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"}) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000040)="084a89c7dad093705586881bf689e38f55ff089316257e28287067c4a0eb9fa055c576942b38fa42b415ec60dd0f1446f9feefe568d2869832f36eed4ab644f1670380e11d593835a4207c813c08118aae7d08a30bb324159904054946ba3b731ebe75b7a4606b891bb17f228765b8a8e358d5ba2861d4a7308982160b4b6bd2feca23bc1620d85a203243724bfc585ddf8da419e9a8625cce3c215a6a210fb91230ae2cce49124c2dd8f7580b78d273c45b6367", 0xb4) 09:46:50 executing program 3: syz_open_dev$hidraw(&(0x7f0000000000), 0x8366, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r2, 0x4b36) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r3, 0x0) (async) syz_open_pts(r3, 0x0) read$hidraw(r3, 0x0, 0x0) 09:46:50 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x40000020) 09:46:50 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 09:46:50 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x2000000, &(0x7f0000000e00)) 09:46:50 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x22e, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21c, 0x2, 0x1, 0x9, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "9c32"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xff, 0xfd89, 0x20}, {0x6, 0x24, 0x1a, 0x6, 0x1}, [@mdlm_detail={0x71, 0x24, 0x13, 0x1, "2ebc74b2e42a2ea28d348d5873b0d8a79b078ed29c11227045622ce1d483b6e309c3e122aff05d5f611bfc431e37b833d7225dc7f56e36935fd9aa1eb65da5ccf42de36c141ea457be305e53642d350bfbe63967896f8a93eec6630820cd3c37bd56ba4445ef5d9eec8a3c1c01"}, @mbim={0xc, 0x24, 0x1b, 0x40, 0x7, 0x40, 0x6, 0x6, 0xe1}, @obex={0x5, 0x24, 0x15, 0xd9ba}, @mdlm_detail={0x93, 0x24, 0x13, 0x2, "430de4fd651e804347747358bcae10fe7b72c6967cc01386503732b3ac4c23303ec15b2703dca0adeb727f106f733d6394e47ac4d59661f596c7144437a0e3cfb794696f632ee94512354c8450675e2b0e3c276aac1b9e9dd3415b5298c2f38a8f72ca8ba5777559d6bf28b15a8266a7055666b08d0a2afcecc94e9d478f640bb88fe0f7e57f86908fc4884697455e"}, @mdlm_detail={0xa9, 0x24, 0x13, 0x1f, "2090bc1f82c5d92021ed799e851b0287fdd18a047ef633bf2fec9567081e927bd1b4acb29d162deca0483b201b63dd1af3713c78a4ce6299100bf8c35e03c5c0ac55424fb1ac71d9cdd5a07b1ae07662414798b91c128a67dd273efe88dbbac3ca93013130d90c4f5b1574588698ed3983e095aa88f1a454e94395526ac13344191620c6c7015a0cc285c9007b8036e349f9b82f09c6cac2e6097d52b3f36d841dcfb5d12e"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0x80, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ef, 0xc1, 0x66, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x2, 0x1, 0x7}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x4, 0x8, 0xf8, 0xff, 0x40}, 0x2f, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f2f0005071002046189610c100a0297900ced32b3dbe371c7fe209a16fe0507ecd606000a"], 0x8, [{0xd0, &(0x7f0000000300)=@string={0xd0, 0x3, "ccbc2903f847e2b6cf52643b5b6d714eb78e3a5a06e62422fa34ec509d241aaf4f9b7c577ee7507727991e2ff2d2480b8e833fc9d565e5031617ebb02e97d23dbd2d9d94eb3fda276257fa847e763996f1bf44629f10fd3a0349e2000b3e56d1df97c2b5ecb620eb79ab52fec7c4274f9ccf9ed08dbe23c6ec3746bbbbdc2ac99c8a8722065795c437552d004ba07d539b52e73fb4ea67d069ecb43416d9120fbba5789e16c956e68b21cf4f83473988d2d119c81bce5d216b743147b5f815b4db2ef3046bf0051787437d194597"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44a}}, {0x89, &(0x7f00000007c0)=@string={0x89, 0x3, "2620d5c033460e4d57aef5889eac04ee06c111fcc9e4e126b26c23efd83f4651928ab866395acb2522b7ac24e83232615c7d90d04a5ac31148e6849469a13555998349d4343127f526de18f38c273c4cf580ff1ddc0482f1eabb839a7997ddbf60435e16929c6d6849201e06f4fa92101bffdfeffa9caa4bcc92aac30945347b14f9a54f5b647c"}}, {0xb8, &(0x7f00000004c0)=@string={0xb8, 0x3, "81a68a957617119c2afbe909ea4bc71543cfec846af8545c705ee52555520953a379f58c8f6a9a0b3efca4dc85d83c8d602509f5ceda40f51e37054fe9be13665541399752ba843dd6a8fb45f9246efcd3d0930d7a03df6336eb5e2c544b4024e1286acd17926ce611e1cbf5ed37635ead26e4a4b50aeef20394084cc2eeacd577db05b550a5267632f38b0a2cad66f87fe054ec285adcd25ffaefdf55a78843ca3ebef189de8d56c7e7ab1a0c45893bd192e9e21b27"}}, {0xba, &(0x7f0000000580)=@string={0xba, 0x3, "23c08e63587428db1c08025cc3d27472308dc2772a99d39f0aa0a38142865eb8c04332c8afba50e84c88933a2f234206780ba9bb28659bb5cc123547d86f8144e35ab1844a754affc5d352498abd3529fc0146733db815e3da5f69cf859cb635bc7244c5192dc0e9bb5e5007487f8f6c5664e722ed7db11eed8bd279e9b8349dc51f5cabadbc95f65e1839773a543ac0c9af6d5319a8b098364512ca8cb5a219a23eacce2ddd5f772d5e10b391f319f1ff883614ec43cd3c"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x403}}, {0x52, &(0x7f0000000680)=@string={0x52, 0x3, "1f7cee28ce55d5dd3a0c252804a5d9b7a031c916f8f540dd9fa62f00f9728d67232d7456af2b24ff080d9b19a45309f242af2e4a854c4a5d9f6a456ad5fb875e14c087d2803d2092434f165aeddf9000"}}]}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000480)=0x80000001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) [ 469.085461][ T2610] FAULT_INJECTION: forcing a failure. [ 469.085461][ T2610] name failslab, interval 1, probability 0, space 0, times 0 09:46:50 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) 09:46:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x6) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000900)=ANY=[@ANYBLOB="a401000d042cc44d009500", @ANYRES16=0x0, @ANYBLOB="100027bd7000ffdbdf251100000040000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080003000100000008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468315f746f5f626f6e640000003000018008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x1a4}, 0x1, 0x0, 0x0, 0x10000811}, 0x20040000) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r5, 0x4b36) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000140)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r5}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r7 = landlock_create_ruleset(&(0x7f0000000880)={0x208}, 0x8, 0x0) r8 = ioctl$TIOCGPTPEER(r6, 0x5441, 0xffffffff) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f00000008c0)={0x1cc, r8}, 0x0) syz_open_pts(r6, 0x0) sendto$phonet(r6, &(0x7f0000000680)="916f489a6acba292cf3a715520df2f32c638cd9ad9a4536348876d8528507d217db70f3e74f9536f963d731fa568ba5aee34746325d71b70bd38e7e5ef06caf60f24ef6618f40c13fffdb41c7ab5fa776e1e2a20c579182c7934053a8b4d8dd3afc1cb52a5e85564d1a25aeb6d2e949095e5a0f6f0b7b787cbce9ee4ce", 0x7d, 0x4804, &(0x7f0000000700)={0x23, 0x1, 0xe0, 0xbf}, 0x10) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:50 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x40000020) [ 469.205741][ T2610] CPU: 0 PID: 2610 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 469.215966][ T2610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 469.226139][ T2610] Call Trace: [ 469.229442][ T2610] [ 469.232391][ T2610] dump_stack_lvl+0x125/0x1b0 [ 469.237111][ T2610] should_fail_ex+0x496/0x5b0 [ 469.241931][ T2610] should_failslab+0x9/0x20 [ 469.246475][ T2610] __kmem_cache_alloc_node+0x5f/0x470 [ 469.251887][ T2610] kmalloc_trace+0x25/0xe0 [ 469.256344][ T2610] alloc_workqueue+0x16f/0x1490 [ 469.261236][ T2610] ? lock_sync+0x190/0x190 [ 469.265702][ T2610] ? workqueue_sysfs_register+0x400/0x400 [ 469.271466][ T2610] ? rcu_is_watching+0x12/0xb0 [ 469.276264][ T2610] nci_register_device+0x514/0xb80 [ 469.281422][ T2610] ? nci_init_complete_req+0x410/0x410 [ 469.286928][ T2610] ? lockdep_init_map_type+0x16d/0x7c0 [ 469.292437][ T2610] virtual_ncidev_open+0x147/0x220 [ 469.297600][ T2610] ? virtual_ncidev_read+0x4e0/0x4e0 09:46:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x6) (async, rerun: 32) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000900)=ANY=[@ANYBLOB="a401000d042cc44d009500", @ANYRES16=0x0, @ANYBLOB="100027bd7000ffdbdf251100000040000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080003000100000008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468315f746f5f626f6e640000003000018008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x1a4}, 0x1, 0x0, 0x0, 0x10000811}, 0x20040000) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r5, 0x4b36) (async, rerun: 64) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async, rerun: 64) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000140)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r5}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) r7 = landlock_create_ruleset(&(0x7f0000000880)={0x208}, 0x8, 0x0) r8 = ioctl$TIOCGPTPEER(r6, 0x5441, 0xffffffff) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f00000008c0)={0x1cc, r8}, 0x0) (async) syz_open_pts(r6, 0x0) sendto$phonet(r6, &(0x7f0000000680)="916f489a6acba292cf3a715520df2f32c638cd9ad9a4536348876d8528507d217db70f3e74f9536f963d731fa568ba5aee34746325d71b70bd38e7e5ef06caf60f24ef6618f40c13fffdb41c7ab5fa776e1e2a20c579182c7934053a8b4d8dd3afc1cb52a5e85564d1a25aeb6d2e949095e5a0f6f0b7b787cbce9ee4ce", 0x7d, 0x4804, &(0x7f0000000700)={0x23, 0x1, 0xe0, 0xbf}, 0x10) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) [ 469.302929][ T2610] misc_open+0x3da/0x4c0 [ 469.307554][ T2610] ? misc_devnode+0x120/0x120 [ 469.312272][ T2610] chrdev_open+0x277/0x700 [ 469.316723][ T2610] ? __unregister_chrdev+0x100/0x100 [ 469.322038][ T2610] ? fsnotify_perm.part.0+0x25d/0x630 [ 469.327446][ T2610] ? fsnotify_perm.part.0+0x268/0x630 [ 469.332851][ T2610] do_dentry_open+0x88b/0x1730 [ 469.337651][ T2610] ? __unregister_chrdev+0x100/0x100 [ 469.342968][ T2610] ? may_open+0x1f2/0x400 [ 469.347342][ T2610] path_openat+0x19af/0x29c0 [ 469.351967][ T2610] ? path_lookupat+0x770/0x770 [ 469.356885][ T2610] do_filp_open+0x1de/0x430 [ 469.361431][ T2610] ? may_open_dev+0xf0/0xf0 [ 469.365962][ T2610] ? expand_files+0x442/0x910 [ 469.370678][ T2610] ? _raw_spin_unlock+0x28/0x40 [ 469.375742][ T2610] ? alloc_fd+0x2da/0x6c0 [ 469.380110][ T2610] do_sys_openat2+0x176/0x1e0 [ 469.385349][ T2610] ? build_open_flags+0x690/0x690 [ 469.390414][ T2610] __x64_sys_openat+0x175/0x210 [ 469.395475][ T2610] ? __ia32_sys_open+0x1e0/0x1e0 [ 469.400453][ T2610] ? ksys_write+0x1a7/0x250 [ 469.405004][ T2610] ? rcu_is_watching+0x12/0xb0 [ 469.409812][ T2610] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 469.415830][ T2610] do_syscall_64+0x38/0xb0 [ 469.420292][ T2610] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 469.426224][ T2610] RIP: 0033:0x7fafba27cae9 [ 469.430673][ T2610] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 469.450310][ T2610] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 469.458752][ T2610] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 469.466750][ T2610] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 469.474747][ T2610] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 469.482746][ T2610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.490833][ T2610] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 469.498841][ T2610] 09:46:51 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x40000020) 09:46:51 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 33) 09:46:51 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) 09:46:51 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r1, 0x540a, 0x3) (async) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) (async) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x6) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000900)=ANY=[@ANYBLOB="a401000d042cc44d009500", @ANYRES16=0x0, @ANYBLOB="100027bd7000ffdbdf251100000040000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080003000100000008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468315f746f5f626f6e640000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020076657468305f746f5f687372000000000800030001000000940001801400020064766d72703100000000000000000000080003000100000014000200776c616e30000000000000000000000008000300010000001400020067656e6576653000000000000000000014000200767863616e31000000000000000000001400020076657468315f746f5f6873720000000008000300020000001400020073797a5f74756e0000000000000000002000018008000300020000001400020067656e6576653100000000000000000060000180080003000100000008000300030000001400020077673000000000000000000000000000140002006e72300000000000000000000000000008000300010000001400020073797a6b616c6c65723000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x1a4}, 0x1, 0x0, 0x0, 0x10000811}, 0x20040000) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000900)=ANY=[@ANYBLOB="a401000d042cc44d009500", @ANYRES16=0x0, @ANYBLOB="100027bd7000ffdbdf251100000040000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080003000100000008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468315f746f5f626f6e640000003000018008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x1a4}, 0x1, 0x0, 0x0, 0x10000811}, 0x20040000) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r5, 0x4b36) (async) ioctl$KDENABIO(r5, 0x4b36) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000140)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r5}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r7 = landlock_create_ruleset(&(0x7f0000000880)={0x208}, 0x8, 0x0) r8 = ioctl$TIOCGPTPEER(r6, 0x5441, 0xffffffff) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f00000008c0)={0x1cc, r8}, 0x0) syz_open_pts(r6, 0x0) sendto$phonet(r6, &(0x7f0000000680)="916f489a6acba292cf3a715520df2f32c638cd9ad9a4536348876d8528507d217db70f3e74f9536f963d731fa568ba5aee34746325d71b70bd38e7e5ef06caf60f24ef6618f40c13fffdb41c7ab5fa776e1e2a20c579182c7934053a8b4d8dd3afc1cb52a5e85564d1a25aeb6d2e949095e5a0f6f0b7b787cbce9ee4ce", 0x7d, 0x4804, &(0x7f0000000700)={0x23, 0x1, 0xe0, 0xbf}, 0x10) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:51 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x2660840, &(0x7f0000000e00)) 09:46:51 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffb, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x7f, 0x4a, 0x263, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x20, 0x40, 0x6, 0x7}}) ioctl$KDDISABIO(r0, 0x4b37) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x2002) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0xffc1) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000000a0a010800000000000000000500000635000d40a4c5a951406992de1a05dc8b2da0f7e091d5374664bc7574002f901f862fdab7964770f19291b5a503771b017e98970b2b00000008000f4000000005a01f63b1670c91a7d37bb433aeca84d3363f1264c3d77d54e6d0d313c7613d8aebef6a8228"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 09:46:51 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) [ 469.752946][ T2655] FAULT_INJECTION: forcing a failure. [ 469.752946][ T2655] name failslab, interval 1, probability 0, space 0, times 0 [ 469.802007][ T2655] CPU: 1 PID: 2655 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 469.812133][ T2655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 469.822218][ T2655] Call Trace: [ 469.825528][ T2655] [ 469.828479][ T2655] dump_stack_lvl+0x125/0x1b0 [ 469.833205][ T2655] should_fail_ex+0x496/0x5b0 [ 469.838034][ T2655] should_failslab+0x9/0x20 [ 469.842585][ T2655] __kmem_cache_alloc_node+0x5f/0x470 [ 469.848000][ T2655] kmalloc_trace+0x25/0xe0 [ 469.852456][ T2655] alloc_workqueue+0x1d4/0x1490 [ 469.857354][ T2655] ? lock_sync+0x190/0x190 [ 469.861817][ T2655] ? workqueue_sysfs_register+0x400/0x400 [ 469.867579][ T2655] ? rcu_is_watching+0x12/0xb0 [ 469.872378][ T2655] nci_register_device+0x514/0xb80 [ 469.877532][ T2655] ? nci_init_complete_req+0x410/0x410 [ 469.883028][ T2655] ? lockdep_init_map_type+0x16d/0x7c0 [ 469.888620][ T2655] virtual_ncidev_open+0x147/0x220 [ 469.893778][ T2655] ? virtual_ncidev_read+0x4e0/0x4e0 [ 469.899102][ T2655] misc_open+0x3da/0x4c0 [ 469.903367][ T2655] ? misc_devnode+0x120/0x120 [ 469.908051][ T2655] chrdev_open+0x277/0x700 [ 469.912556][ T2655] ? __unregister_chrdev+0x100/0x100 [ 469.917855][ T2655] ? fsnotify_perm.part.0+0x25d/0x630 [ 469.923321][ T2655] ? fsnotify_perm.part.0+0x268/0x630 [ 469.928787][ T2655] do_dentry_open+0x88b/0x1730 [ 469.933551][ T2655] ? __unregister_chrdev+0x100/0x100 [ 469.938841][ T2655] ? may_open+0x1f2/0x400 [ 469.943182][ T2655] path_openat+0x19af/0x29c0 [ 469.947869][ T2655] ? path_lookupat+0x770/0x770 [ 469.952649][ T2655] do_filp_open+0x1de/0x430 [ 469.957152][ T2655] ? may_open_dev+0xf0/0xf0 [ 469.961654][ T2655] ? expand_files+0x442/0x910 [ 469.966351][ T2655] ? _raw_spin_unlock+0x28/0x40 [ 469.971211][ T2655] ? alloc_fd+0x2da/0x6c0 [ 469.975548][ T2655] do_sys_openat2+0x176/0x1e0 [ 469.980229][ T2655] ? build_open_flags+0x690/0x690 [ 469.985260][ T2655] __x64_sys_openat+0x175/0x210 [ 469.990123][ T2655] ? __ia32_sys_open+0x1e0/0x1e0 [ 469.995238][ T2655] ? ksys_write+0x1a7/0x250 [ 469.999748][ T2655] ? rcu_is_watching+0x12/0xb0 [ 470.004518][ T2655] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 470.010505][ T2655] do_syscall_64+0x38/0xb0 [ 470.014936][ T2655] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 470.020843][ T2655] RIP: 0033:0x7fafba27cae9 [ 470.025261][ T2655] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 470.044960][ T2655] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 470.053390][ T2655] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 470.061464][ T2655] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 470.069804][ T2655] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 470.077785][ T2655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.085761][ T2655] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 470.093739][ T2655] 09:46:52 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x22e, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21c, 0x2, 0x1, 0x9, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "9c32"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xff, 0xfd89, 0x20}, {0x6, 0x24, 0x1a, 0x6, 0x1}, [@mdlm_detail={0x71, 0x24, 0x13, 0x1, "2ebc74b2e42a2ea28d348d5873b0d8a79b078ed29c11227045622ce1d483b6e309c3e122aff05d5f611bfc431e37b833d7225dc7f56e36935fd9aa1eb65da5ccf42de36c141ea457be305e53642d350bfbe63967896f8a93eec6630820cd3c37bd56ba4445ef5d9eec8a3c1c01"}, @mbim={0xc, 0x24, 0x1b, 0x40, 0x7, 0x40, 0x6, 0x6, 0xe1}, @obex={0x5, 0x24, 0x15, 0xd9ba}, @mdlm_detail={0x93, 0x24, 0x13, 0x2, "430de4fd651e804347747358bcae10fe7b72c6967cc01386503732b3ac4c23303ec15b2703dca0adeb727f106f733d6394e47ac4d59661f596c7144437a0e3cfb794696f632ee94512354c8450675e2b0e3c276aac1b9e9dd3415b5298c2f38a8f72ca8ba5777559d6bf28b15a8266a7055666b08d0a2afcecc94e9d478f640bb88fe0f7e57f86908fc4884697455e"}, @mdlm_detail={0xa9, 0x24, 0x13, 0x1f, "2090bc1f82c5d92021ed799e851b0287fdd18a047ef633bf2fec9567081e927bd1b4acb29d162deca0483b201b63dd1af3713c78a4ce6299100bf8c35e03c5c0ac55424fb1ac71d9cdd5a07b1ae07662414798b91c128a67dd273efe88dbbac3ca93013130d90c4f5b1574588698ed3983e095aa88f1a454e94395526ac13344191620c6c7015a0cc285c9007b8036e349f9b82f09c6cac2e6097d52b3f36d841dcfb5d12e"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0x80, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ef, 0xc1, 0x66, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x2, 0x1, 0x7}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x4, 0x8, 0xf8, 0xff, 0x40}, 0x2f, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f2f0005071002046189610c100a0297900ced32b3dbe371c7fe209a16fe0507ecd606000a"], 0x8, [{0xd0, &(0x7f0000000300)=@string={0xd0, 0x3, "ccbc2903f847e2b6cf52643b5b6d714eb78e3a5a06e62422fa34ec509d241aaf4f9b7c577ee7507727991e2ff2d2480b8e833fc9d565e5031617ebb02e97d23dbd2d9d94eb3fda276257fa847e763996f1bf44629f10fd3a0349e2000b3e56d1df97c2b5ecb620eb79ab52fec7c4274f9ccf9ed08dbe23c6ec3746bbbbdc2ac99c8a8722065795c437552d004ba07d539b52e73fb4ea67d069ecb43416d9120fbba5789e16c956e68b21cf4f83473988d2d119c81bce5d216b743147b5f815b4db2ef3046bf0051787437d194597"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44a}}, {0x89, &(0x7f00000007c0)=@string={0x89, 0x3, "2620d5c033460e4d57aef5889eac04ee06c111fcc9e4e126b26c23efd83f4651928ab866395acb2522b7ac24e83232615c7d90d04a5ac31148e6849469a13555998349d4343127f526de18f38c273c4cf580ff1ddc0482f1eabb839a7997ddbf60435e16929c6d6849201e06f4fa92101bffdfeffa9caa4bcc92aac30945347b14f9a54f5b647c"}}, {0xb8, &(0x7f00000004c0)=@string={0xb8, 0x3, "81a68a957617119c2afbe909ea4bc71543cfec846af8545c705ee52555520953a379f58c8f6a9a0b3efca4dc85d83c8d602509f5ceda40f51e37054fe9be13665541399752ba843dd6a8fb45f9246efcd3d0930d7a03df6336eb5e2c544b4024e1286acd17926ce611e1cbf5ed37635ead26e4a4b50aeef20394084cc2eeacd577db05b550a5267632f38b0a2cad66f87fe054ec285adcd25ffaefdf55a78843ca3ebef189de8d56c7e7ab1a0c45893bd192e9e21b27"}}, {0xba, &(0x7f0000000580)=@string={0xba, 0x3, "23c08e63587428db1c08025cc3d27472308dc2772a99d39f0aa0a38142865eb8c04332c8afba50e84c88933a2f234206780ba9bb28659bb5cc123547d86f8144e35ab1844a754affc5d352498abd3529fc0146733db815e3da5f69cf859cb635bc7244c5192dc0e9bb5e5007487f8f6c5664e722ed7db11eed8bd279e9b8349dc51f5cabadbc95f65e1839773a543ac0c9af6d5319a8b098364512ca8cb5a219a23eacce2ddd5f772d5e10b391f319f1ff883614ec43cd3c"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x403}}, {0x52, &(0x7f0000000680)=@string={0x52, 0x3, "1f7cee28ce55d5dd3a0c252804a5d9b7a031c916f8f540dd9fa62f00f9728d67232d7456af2b24ff080d9b19a45309f242af2e4a854c4a5d9f6a456ad5fb875e14c087d2803d2092434f165aeddf9000"}}]}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000480)=0x80000001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:52 executing program 3: gettid() r0 = gettid() wait4(r0, &(0x7f0000000000), 0x20000000, &(0x7f0000000040)) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:52 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x2760840, &(0x7f0000000e00)) 09:46:52 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x20, 0x0, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000000000, 0x40281) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x2, 0x260003) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000000000, 0x40281) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000000000, 0xc0281) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000000)={0x7ff, r0}) r4 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r5, 0x5411, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x6, 0x0, 0x8}) r6 = accept$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000240)=0x10) ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) accept$phonet_pipe(r6, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 09:46:52 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffb, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x7f, 0x4a, 0x263, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x20, 0x40, 0x6, 0x7}}) (async) ioctl$KDDISABIO(r0, 0x4b37) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x2002) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) (async) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0xffc1) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000000a0a010800000000000000000500000635000d40a4c5a951406992de1a05dc8b2da0f7e091d5374664bc7574002f901f862fdab7964770f19291b5a503771b017e98970b2b00000008000f4000000005a01f63b1670c91a7d37bb433aeca84d3363f1264c3d77d54e6d0d313c7613d8aebef6a8228"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 09:46:52 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 34) 09:46:52 executing program 3: gettid() r0 = gettid() wait4(r0, &(0x7f0000000000), 0x20000000, &(0x7f0000000040)) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:46:52 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x20, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x20, 0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000040), 0x8000000000000000, 0x40281) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000000000, 0x40281) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x2, 0x260003) (async) syz_open_dev$vcsu(&(0x7f0000000180), 0x2, 0x260003) syz_open_dev$dri(&(0x7f0000000040), 0x8000000000000000, 0x40281) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000000000, 0x40281) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000000000, 0xc0281) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000000)={0x7ff, r0}) r4 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r5, 0x5411, 0x0) (async) ioctl$TIOCOUTQ(r5, 0x5411, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x6, 0x0, 0x8}) r6 = accept$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000240)=0x10) ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) accept$phonet_pipe(r6, &(0x7f00000000c0), &(0x7f0000000100)=0x10) [ 470.421030][ T2674] FAULT_INJECTION: forcing a failure. [ 470.421030][ T2674] name failslab, interval 1, probability 0, space 0, times 0 09:46:52 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffb, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x7f, 0x4a, 0x263, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x20, 0x40, 0x6, 0x7}}) ioctl$KDDISABIO(r0, 0x4b37) (async) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x2002) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0xffc1) (async) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000000a0a010800000000000000000500000635000d40a4c5a951406992de1a05dc8b2da0f7e091d5374664bc7574002f901f862fdab7964770f19291b5a503771b017e98970b2b00000008000f4000000005a01f63b1670c91a7d37bb433aeca84d3363f1264c3d77d54e6d0d313c7613d8aebef6a8228"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 09:46:52 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x3000000, &(0x7f0000000e00)) [ 470.464885][ T2674] CPU: 0 PID: 2674 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 470.475102][ T2674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 470.485192][ T2674] Call Trace: [ 470.488497][ T2674] [ 470.491465][ T2674] dump_stack_lvl+0x125/0x1b0 [ 470.496188][ T2674] should_fail_ex+0x496/0x5b0 [ 470.500917][ T2674] should_failslab+0x9/0x20 [ 470.505471][ T2674] __kmem_cache_alloc_node+0x5f/0x470 [ 470.510893][ T2674] kmalloc_trace+0x25/0xe0 [ 470.515379][ T2674] apply_wqattrs_prepare+0x137/0xa90 [ 470.520720][ T2674] ? preempt_count_sub+0x150/0x150 [ 470.525889][ T2674] apply_workqueue_attrs_locked+0xcb/0x150 [ 470.531836][ T2674] alloc_workqueue+0xc8b/0x1490 [ 470.536736][ T2674] ? workqueue_sysfs_register+0x400/0x400 [ 470.543975][ T2674] ? rcu_is_watching+0x12/0xb0 [ 470.548774][ T2674] nci_register_device+0x514/0xb80 [ 470.554095][ T2674] ? nci_init_complete_req+0x410/0x410 [ 470.559624][ T2674] ? lockdep_init_map_type+0x16d/0x7c0 [ 470.565141][ T2674] virtual_ncidev_open+0x147/0x220 [ 470.570305][ T2674] ? virtual_ncidev_read+0x4e0/0x4e0 [ 470.575634][ T2674] misc_open+0x3da/0x4c0 [ 470.579991][ T2674] ? misc_devnode+0x120/0x120 [ 470.584685][ T2674] chrdev_open+0x277/0x700 [ 470.589111][ T2674] ? __unregister_chrdev+0x100/0x100 [ 470.594412][ T2674] ? fsnotify_perm.part.0+0x25d/0x630 [ 470.599798][ T2674] ? fsnotify_perm.part.0+0x268/0x630 [ 470.605293][ T2674] do_dentry_open+0x88b/0x1730 [ 470.610335][ T2674] ? __unregister_chrdev+0x100/0x100 [ 470.615620][ T2674] ? may_open+0x1f2/0x400 [ 470.619961][ T2674] path_openat+0x19af/0x29c0 [ 470.624642][ T2674] ? path_lookupat+0x770/0x770 [ 470.629599][ T2674] do_filp_open+0x1de/0x430 [ 470.634105][ T2674] ? may_open_dev+0xf0/0xf0 [ 470.638615][ T2674] ? expand_files+0x442/0x910 [ 470.643473][ T2674] ? _raw_spin_unlock+0x28/0x40 [ 470.648427][ T2674] ? alloc_fd+0x2da/0x6c0 [ 470.652766][ T2674] do_sys_openat2+0x176/0x1e0 [ 470.657453][ T2674] ? build_open_flags+0x690/0x690 [ 470.662483][ T2674] __x64_sys_openat+0x175/0x210 [ 470.667341][ T2674] ? __ia32_sys_open+0x1e0/0x1e0 [ 470.672282][ T2674] ? ksys_write+0x1a7/0x250 [ 470.676796][ T2674] ? rcu_is_watching+0x12/0xb0 [ 470.681560][ T2674] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 470.687545][ T2674] do_syscall_64+0x38/0xb0 [ 470.691976][ T2674] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 470.697886][ T2674] RIP: 0033:0x7fafba27cae9 [ 470.702300][ T2674] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 470.721927][ T2674] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 470.730436][ T2674] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 470.738495][ T2674] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 470.746541][ T2674] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 470.754600][ T2674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:46:52 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x20, 0x0, 0x1}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000000000, 0x40281) (rerun: 32) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x2, 0x260003) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000000000, 0x40281) (rerun: 32) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000000000, 0xc0281) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000000)={0x7ff, r0}) (async, rerun: 32) r4 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) ioctl$TIOCOUTQ(r5, 0x5411, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x6, 0x0, 0x8}) (async, rerun: 32) r6 = accept$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000240)=0x10) ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) (async) accept$phonet_pipe(r6, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 09:46:52 executing program 3: gettid() r0 = gettid() wait4(r0, &(0x7f0000000000), 0x20000000, &(0x7f0000000040)) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) [ 470.762579][ T2674] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 470.770562][ T2674] 09:46:53 executing program 3: syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x385300) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x9, 0x3e, 0xc00000, 0x0, 0x9, "f28c5a32e8715498f6b06fb8f4b1676d5a3100"}) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x800) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000140)=""/231) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) read$hidraw(r0, 0x0, 0x4e) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000000) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080)) 09:46:53 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x22e, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21c, 0x2, 0x1, 0x9, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "9c32"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xff, 0xfd89, 0x20}, {0x6, 0x24, 0x1a, 0x6, 0x1}, [@mdlm_detail={0x71, 0x24, 0x13, 0x1, "2ebc74b2e42a2ea28d348d5873b0d8a79b078ed29c11227045622ce1d483b6e309c3e122aff05d5f611bfc431e37b833d7225dc7f56e36935fd9aa1eb65da5ccf42de36c141ea457be305e53642d350bfbe63967896f8a93eec6630820cd3c37bd56ba4445ef5d9eec8a3c1c01"}, @mbim={0xc, 0x24, 0x1b, 0x40, 0x7, 0x40, 0x6, 0x6, 0xe1}, @obex={0x5, 0x24, 0x15, 0xd9ba}, @mdlm_detail={0x93, 0x24, 0x13, 0x2, "430de4fd651e804347747358bcae10fe7b72c6967cc01386503732b3ac4c23303ec15b2703dca0adeb727f106f733d6394e47ac4d59661f596c7144437a0e3cfb794696f632ee94512354c8450675e2b0e3c276aac1b9e9dd3415b5298c2f38a8f72ca8ba5777559d6bf28b15a8266a7055666b08d0a2afcecc94e9d478f640bb88fe0f7e57f86908fc4884697455e"}, @mdlm_detail={0xa9, 0x24, 0x13, 0x1f, "2090bc1f82c5d92021ed799e851b0287fdd18a047ef633bf2fec9567081e927bd1b4acb29d162deca0483b201b63dd1af3713c78a4ce6299100bf8c35e03c5c0ac55424fb1ac71d9cdd5a07b1ae07662414798b91c128a67dd273efe88dbbac3ca93013130d90c4f5b1574588698ed3983e095aa88f1a454e94395526ac13344191620c6c7015a0cc285c9007b8036e349f9b82f09c6cac2e6097d52b3f36d841dcfb5d12e"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0x80, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ef, 0xc1, 0x66, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x2, 0x1, 0x7}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x4, 0x8, 0xf8, 0xff, 0x40}, 0x2f, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f2f0005071002046189610c100a0297900ced32b3dbe371c7fe209a16fe0507ecd606000a"], 0x8, [{0xd0, &(0x7f0000000300)=@string={0xd0, 0x3, "ccbc2903f847e2b6cf52643b5b6d714eb78e3a5a06e62422fa34ec509d241aaf4f9b7c577ee7507727991e2ff2d2480b8e833fc9d565e5031617ebb02e97d23dbd2d9d94eb3fda276257fa847e763996f1bf44629f10fd3a0349e2000b3e56d1df97c2b5ecb620eb79ab52fec7c4274f9ccf9ed08dbe23c6ec3746bbbbdc2ac99c8a8722065795c437552d004ba07d539b52e73fb4ea67d069ecb43416d9120fbba5789e16c956e68b21cf4f83473988d2d119c81bce5d216b743147b5f815b4db2ef3046bf0051787437d194597"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44a}}, {0x89, &(0x7f00000007c0)=@string={0x89, 0x3, "2620d5c033460e4d57aef5889eac04ee06c111fcc9e4e126b26c23efd83f4651928ab866395acb2522b7ac24e83232615c7d90d04a5ac31148e6849469a13555998349d4343127f526de18f38c273c4cf580ff1ddc0482f1eabb839a7997ddbf60435e16929c6d6849201e06f4fa92101bffdfeffa9caa4bcc92aac30945347b14f9a54f5b647c"}}, {0xb8, &(0x7f00000004c0)=@string={0xb8, 0x3, "81a68a957617119c2afbe909ea4bc71543cfec846af8545c705ee52555520953a379f58c8f6a9a0b3efca4dc85d83c8d602509f5ceda40f51e37054fe9be13665541399752ba843dd6a8fb45f9246efcd3d0930d7a03df6336eb5e2c544b4024e1286acd17926ce611e1cbf5ed37635ead26e4a4b50aeef20394084cc2eeacd577db05b550a5267632f38b0a2cad66f87fe054ec285adcd25ffaefdf55a78843ca3ebef189de8d56c7e7ab1a0c45893bd192e9e21b27"}}, {0xba, &(0x7f0000000580)=@string={0xba, 0x3, "23c08e63587428db1c08025cc3d27472308dc2772a99d39f0aa0a38142865eb8c04332c8afba50e84c88933a2f234206780ba9bb28659bb5cc123547d86f8144e35ab1844a754affc5d352498abd3529fc0146733db815e3da5f69cf859cb635bc7244c5192dc0e9bb5e5007487f8f6c5664e722ed7db11eed8bd279e9b8349dc51f5cabadbc95f65e1839773a543ac0c9af6d5319a8b098364512ca8cb5a219a23eacce2ddd5f772d5e10b391f319f1ff883614ec43cd3c"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x403}}, {0x52, &(0x7f0000000680)=@string={0x52, 0x3, "1f7cee28ce55d5dd3a0c252804a5d9b7a031c916f8f540dd9fa62f00f9728d67232d7456af2b24ff080d9b19a45309f242af2e4a854c4a5d9f6a456ad5fb875e14c087d2803d2092434f165aeddf9000"}}]}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000480)=0x80000001) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:53 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80800) socket$pptp(0x18, 0x1, 0x2) 09:46:53 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 35) 09:46:53 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x4000000, &(0x7f0000000e00)) 09:46:53 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) recvmsg$can_j1939(r0, 0x0, 0x1e2) 09:46:53 executing program 3: syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x385300) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x385300) syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x9, 0x3e, 0xc00000, 0x0, 0x9, "f28c5a32e8715498f6b06fb8f4b1676d5a3100"}) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x9, 0x3e, 0xc00000, 0x0, 0x9, "f28c5a32e8715498f6b06fb8f4b1676d5a3100"}) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x800) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000140)=""/231) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) (async) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) read$hidraw(r0, 0x0, 0x4e) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000000) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080)) 09:46:53 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) recvmsg$can_j1939(r0, 0x0, 0x1e2) [ 471.470500][ T2715] FAULT_INJECTION: forcing a failure. [ 471.470500][ T2715] name failslab, interval 1, probability 0, space 0, times 0 [ 471.498382][ T2715] CPU: 0 PID: 2715 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 471.508516][ T2715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 471.518967][ T2715] Call Trace: [ 471.522358][ T2715] [ 471.525315][ T2715] dump_stack_lvl+0x125/0x1b0 [ 471.530039][ T2715] should_fail_ex+0x496/0x5b0 [ 471.534780][ T2715] should_failslab+0x9/0x20 [ 471.539330][ T2715] __kmem_cache_alloc_node+0x5f/0x470 [ 471.544741][ T2715] ? alloc_workqueue+0xc80/0x1490 [ 471.549812][ T2715] ? apply_wqattrs_prepare+0xff/0xa90 [ 471.555316][ T2715] __kmalloc+0x4f/0x100 [ 471.559617][ T2715] apply_wqattrs_prepare+0xff/0xa90 [ 471.565049][ T2715] ? preempt_count_sub+0x150/0x150 [ 471.570483][ T2715] apply_workqueue_attrs_locked+0xcb/0x150 [ 471.576418][ T2715] alloc_workqueue+0xc8b/0x1490 [ 471.581324][ T2715] ? workqueue_sysfs_register+0x400/0x400 [ 471.587182][ T2715] ? rcu_is_watching+0x12/0xb0 [ 471.592069][ T2715] nci_register_device+0x514/0xb80 [ 471.597219][ T2715] ? nci_init_complete_req+0x410/0x410 [ 471.602724][ T2715] ? lockdep_init_map_type+0x16d/0x7c0 [ 471.608315][ T2715] virtual_ncidev_open+0x147/0x220 [ 471.613477][ T2715] ? virtual_ncidev_read+0x4e0/0x4e0 [ 471.619082][ T2715] misc_open+0x3da/0x4c0 [ 471.623807][ T2715] ? misc_devnode+0x120/0x120 [ 471.628705][ T2715] chrdev_open+0x277/0x700 [ 471.633242][ T2715] ? __unregister_chrdev+0x100/0x100 [ 471.638582][ T2715] ? fsnotify_perm.part.0+0x25d/0x630 [ 471.644082][ T2715] ? fsnotify_perm.part.0+0x268/0x630 [ 471.649502][ T2715] do_dentry_open+0x88b/0x1730 [ 471.654308][ T2715] ? __unregister_chrdev+0x100/0x100 [ 471.659624][ T2715] ? may_open+0x1f2/0x400 [ 471.663972][ T2715] path_openat+0x19af/0x29c0 [ 471.668573][ T2715] ? path_lookupat+0x770/0x770 [ 471.673355][ T2715] do_filp_open+0x1de/0x430 [ 471.677863][ T2715] ? may_open_dev+0xf0/0xf0 [ 471.682377][ T2715] ? expand_files+0x442/0x910 [ 471.687068][ T2715] ? _raw_spin_unlock+0x28/0x40 [ 471.691928][ T2715] ? alloc_fd+0x2da/0x6c0 [ 471.696353][ T2715] do_sys_openat2+0x176/0x1e0 [ 471.701129][ T2715] ? build_open_flags+0x690/0x690 [ 471.706160][ T2715] __x64_sys_openat+0x175/0x210 [ 471.711026][ T2715] ? __ia32_sys_open+0x1e0/0x1e0 [ 471.715995][ T2715] ? ksys_write+0x1a7/0x250 [ 471.720512][ T2715] ? rcu_is_watching+0x12/0xb0 [ 471.725286][ T2715] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 471.731285][ T2715] do_syscall_64+0x38/0xb0 [ 471.735716][ T2715] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 471.741630][ T2715] RIP: 0033:0x7fafba27cae9 [ 471.746144][ T2715] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 09:46:53 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80800) (async) socket$pptp(0x18, 0x1, 0x2) 09:46:53 executing program 3: syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x385300) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x9, 0x3e, 0xc00000, 0x0, 0x9, "f28c5a32e8715498f6b06fb8f4b1676d5a3100"}) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x800) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000140)=""/231) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) read$hidraw(r0, 0x0, 0x4e) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000000) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080)) syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x385300) (async) syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x9, 0x3e, 0xc00000, 0x0, 0x9, "f28c5a32e8715498f6b06fb8f4b1676d5a3100"}) (async) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000140)=""/231) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) (async) read$hidraw(r0, 0x0, 0x4e) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000000) (async) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080)) (async) 09:46:53 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) recvmsg$can_j1939(r0, 0x0, 0x1e2) [ 471.765759][ T2715] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 471.774177][ T2715] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 471.782410][ T2715] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 471.790386][ T2715] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 471.798358][ T2715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 471.806340][ T2715] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 471.814316][ T2715] 09:46:53 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/6}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r2 = syz_open_pts(r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8, 0x20, 0x7fffffff, 0x3, {{0x22, 0x4, 0x3, 0x0, 0x88, 0x67, 0x0, 0x1, 0x4, 0x0, @multicast1, @broadcast, {[@noop, @lsrr={0x83, 0x1b, 0x32, [@local, @dev={0xac, 0x14, 0x14, 0x42}, @loopback, @empty, @rand_addr=0x64010100, @empty]}, @cipso={0x86, 0x11, 0x0, [{0x7, 0xb, "c71b15dc5368faf166"}]}, @timestamp_prespec={0x44, 0x3c, 0x99, 0x3, 0x4, [{@remote, 0x5}, {@local, 0x6b}, {@empty, 0x3f}, {@loopback, 0x7}, {@local, 0x5e}, {@remote, 0x4}, {@private=0xa010102, 0xfffffffd}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xa, [@broadcast]}]}}}}}) ioctl$KDSKBLED(r2, 0x4b65, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'sit0\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="736974fbdc9ae8ff0000000000000000", @ANYRES32=0x0, @ANYBLOB="830026a564d0b592a9e7474c4400087800fffffff780000001425200480064000081049078ffffffff640101014414cc50000000050000d9eb0000003700000002890b08000000ff0a0101014411c653d7745e322610b07f0eedab918300000000"]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1a8, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1a8}}, 0x800) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f00000009c0)="e2c02ccc8d34cdaa3d7c397d9fb561f7fab09006a6db4cd909f47bb9") r8 = syz_open_dev$vcsu(&(0x7f0000000600), 0x7, 0x141100) ioctl$TIOCSERGETLSR(r8, 0x5459, &(0x7f0000000880)) 09:46:53 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80800) (async) socket$pptp(0x18, 0x1, 0x2) 09:46:53 executing program 2: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000002c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x29) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="f8308d37129b34ede387f725ef0626c08fbf3391c66e94ec2a23ce50e448d8a9125600", @ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf2509000000240001800800030001000000080003000100000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="38000180140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030002000000080003000000000044000180140002007465616d5f736c6176655f3100000000080003000200000008000300010000001400020073797a5f74756e0000000000000000000800030000000000"], 0xd8}}, 0x4894) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:53 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x6) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) read$hidraw(r1, 0x0, 0x3b) 09:46:53 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 36) 09:46:53 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x5000000, &(0x7f0000000e00)) 09:46:53 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/6}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r2 = syz_open_pts(r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8, 0x20, 0x7fffffff, 0x3, {{0x22, 0x4, 0x3, 0x0, 0x88, 0x67, 0x0, 0x1, 0x4, 0x0, @multicast1, @broadcast, {[@noop, @lsrr={0x83, 0x1b, 0x32, [@local, @dev={0xac, 0x14, 0x14, 0x42}, @loopback, @empty, @rand_addr=0x64010100, @empty]}, @cipso={0x86, 0x11, 0x0, [{0x7, 0xb, "c71b15dc5368faf166"}]}, @timestamp_prespec={0x44, 0x3c, 0x99, 0x3, 0x4, [{@remote, 0x5}, {@local, 0x6b}, {@empty, 0x3f}, {@loopback, 0x7}, {@local, 0x5e}, {@remote, 0x4}, {@private=0xa010102, 0xfffffffd}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xa, [@broadcast]}]}}}}}) (async) ioctl$KDSKBLED(r2, 0x4b65, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'sit0\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="736974fbdc9ae8ff0000000000000000", @ANYRES32=0x0, @ANYBLOB="830026a564d0b592a9e7474c4400087800fffffff780000001425200480064000081049078ffffffff640101014414cc50000000050000d9eb0000003700000002890b08000000ff0a0101014411c653d7745e322610b07f0eedab918300000000"]}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1a8, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1a8}}, 0x800) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f00000009c0)="e2c02ccc8d34cdaa3d7c397d9fb561f7fab09006a6db4cd909f47bb9") r8 = syz_open_dev$vcsu(&(0x7f0000000600), 0x7, 0x141100) ioctl$TIOCSERGETLSR(r8, 0x5459, &(0x7f0000000880)) 09:46:53 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r1, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x6) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) (async) read$hidraw(r1, 0x0, 0x3b) 09:46:53 executing program 2: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000002c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x29) (async, rerun: 32) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="f8308d37129b34ede387f725ef0626c08fbf3391c66e94ec2a23ce50e448d8a9125600", @ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf2509000000240001800800030001000000080003000100000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="38000180140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030002000000080003000000000044000180140002007465616d5f736c6176655f3100000000080003000200000008000300010000001400020073797a5f74756e0000000000000000000800030000000000"], 0xd8}}, 0x4894) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (rerun: 32) 09:46:53 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async, rerun: 64) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/6}) (async, rerun: 64) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) r2 = syz_open_pts(r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8, 0x20, 0x7fffffff, 0x3, {{0x22, 0x4, 0x3, 0x0, 0x88, 0x67, 0x0, 0x1, 0x4, 0x0, @multicast1, @broadcast, {[@noop, @lsrr={0x83, 0x1b, 0x32, [@local, @dev={0xac, 0x14, 0x14, 0x42}, @loopback, @empty, @rand_addr=0x64010100, @empty]}, @cipso={0x86, 0x11, 0x0, [{0x7, 0xb, "c71b15dc5368faf166"}]}, @timestamp_prespec={0x44, 0x3c, 0x99, 0x3, 0x4, [{@remote, 0x5}, {@local, 0x6b}, {@empty, 0x3f}, {@loopback, 0x7}, {@local, 0x5e}, {@remote, 0x4}, {@private=0xa010102, 0xfffffffd}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xa, [@broadcast]}]}}}}}) (async, rerun: 64) ioctl$KDSKBLED(r2, 0x4b65, 0x94) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'sit0\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="736974fbdc9ae8ff0000000000000000", @ANYRES32=0x0, @ANYBLOB="830026a564d0b592a9e7474c4400087800fffffff780000001425200480064000081049078ffffffff640101014414cc50000000050000d9eb0000003700000002890b08000000ff0a0101014411c653d7745e322610b07f0eedab918300000000"]}) (rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1a8, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1a8}}, 0x800) (async) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f00000009c0)="e2c02ccc8d34cdaa3d7c397d9fb561f7fab09006a6db4cd909f47bb9") (async, rerun: 64) r8 = syz_open_dev$vcsu(&(0x7f0000000600), 0x7, 0x141100) (rerun: 64) ioctl$TIOCSERGETLSR(r8, 0x5459, &(0x7f0000000880)) 09:46:53 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r1, 0x0) accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) 09:46:53 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async, rerun: 64) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x6) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) read$hidraw(r1, 0x0, 0x3b) [ 471.957175][ T2737] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 472.125821][ T2774] FAULT_INJECTION: forcing a failure. [ 472.125821][ T2774] name failslab, interval 1, probability 0, space 0, times 0 [ 472.202884][ T2774] CPU: 1 PID: 2774 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 472.213322][ T2774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 472.223406][ T2774] Call Trace: [ 472.226714][ T2774] [ 472.229667][ T2774] dump_stack_lvl+0x125/0x1b0 [ 472.234401][ T2774] should_fail_ex+0x496/0x5b0 [ 472.239140][ T2774] should_failslab+0x9/0x20 [ 472.243684][ T2774] __kmem_cache_alloc_node+0x5f/0x470 09:46:54 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r1, 0x0) accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) [ 472.249094][ T2774] ? alloc_workqueue+0xeaf/0x1490 [ 472.254177][ T2774] kmalloc_node_trace+0x22/0xd0 [ 472.259158][ T2774] alloc_worker+0x40/0x1a0 [ 472.263608][ T2774] init_rescuer+0x6f/0x1f0 [ 472.268144][ T2774] alloc_workqueue+0xd35/0x1490 [ 472.273035][ T2774] ? workqueue_sysfs_register+0x400/0x400 [ 472.278791][ T2774] ? rcu_is_watching+0x12/0xb0 [ 472.283593][ T2774] nci_register_device+0x514/0xb80 [ 472.288848][ T2774] ? nci_init_complete_req+0x410/0x410 [ 472.294344][ T2774] ? lockdep_init_map_type+0x16d/0x7c0 [ 472.299854][ T2774] virtual_ncidev_open+0x147/0x220 [ 472.305009][ T2774] ? virtual_ncidev_read+0x4e0/0x4e0 [ 472.310336][ T2774] misc_open+0x3da/0x4c0 [ 472.314620][ T2774] ? misc_devnode+0x120/0x120 [ 472.319316][ T2774] chrdev_open+0x277/0x700 [ 472.323743][ T2774] ? __unregister_chrdev+0x100/0x100 [ 472.329028][ T2774] ? fsnotify_perm.part.0+0x25d/0x630 [ 472.334413][ T2774] ? fsnotify_perm.part.0+0x268/0x630 [ 472.339801][ T2774] do_dentry_open+0x88b/0x1730 [ 472.344564][ T2774] ? __unregister_chrdev+0x100/0x100 [ 472.349864][ T2774] ? may_open+0x1f2/0x400 [ 472.354462][ T2774] path_openat+0x19af/0x29c0 [ 472.359051][ T2774] ? path_lookupat+0x770/0x770 [ 472.363829][ T2774] do_filp_open+0x1de/0x430 [ 472.368332][ T2774] ? may_open_dev+0xf0/0xf0 [ 472.372837][ T2774] ? expand_files+0x442/0x910 [ 472.377524][ T2774] ? _raw_spin_unlock+0x28/0x40 [ 472.382469][ T2774] ? alloc_fd+0x2da/0x6c0 [ 472.386803][ T2774] do_sys_openat2+0x176/0x1e0 [ 472.391492][ T2774] ? build_open_flags+0x690/0x690 [ 472.396528][ T2774] __x64_sys_openat+0x175/0x210 [ 472.401384][ T2774] ? __ia32_sys_open+0x1e0/0x1e0 [ 472.406413][ T2774] ? ksys_write+0x1a7/0x250 [ 472.410921][ T2774] ? rcu_is_watching+0x12/0xb0 [ 472.415772][ T2774] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 472.421764][ T2774] do_syscall_64+0x38/0xb0 [ 472.426190][ T2774] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 472.432097][ T2774] RIP: 0033:0x7fafba27cae9 [ 472.436520][ T2774] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 472.456225][ T2774] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 472.464646][ T2774] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 472.472619][ T2774] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 472.480589][ T2774] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 472.488572][ T2774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.496837][ T2774] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 472.504826][ T2774] 09:46:54 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = socket(0x1, 0x7, 0x2) sendmsg$can_j1939(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)="de09b13351e02500016ffbfead9ad1b81d7811b1211a1cb32bcea63a73086fe9604e2f15e2a302f5e3a47e806f5bac7aaaf32fe71b2c6b6b08fa19e4c9c36f2449a081595e62499af0f02f813feb557a98c00a0662c090451e8de20f4f76f4853240ea607c18ce866478e27f79de3992c1c0f17dfc16625ec13e8d1c04efa6125d7ee5eb224b4a6dd1948e1dc949bdf870c62e7e3f0e9388ee241a0b70dffea2d57bf9254d7812eddd10bb926be858a7096a3cbfe7d1b1ceb1ffaf5b3100c8941c14a7983ad2354214441b435645b79da8a967b8e97d04b84d959122985bbe01411ef84cf1380b359a8c229770606f7a", 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r3, 0x4b36) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x85, 0x10000, 0x1}) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) sendto$phonet(r3, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x20000081, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r3, 0x58, &(0x7f0000000bc0)}, 0x10) recvmsg$can_j1939(r3, 0x0, 0x0) 09:46:54 executing program 3: ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x9, "7f3194a29f67fad8ba1725c6ef0d523061bdc82feb73b98f0840dd1400e247bb4541ac545bf33699231db7c94e984cbf60524eb6e833db4378c767fc71c3f847"}) syz_open_pts(0xffffffffffffffff, 0x400) read$hidraw(0xffffffffffffffff, 0x0, 0x80) 09:46:54 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async, rerun: 64) syz_open_pts(r1, 0x0) (rerun: 64) accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) 09:46:54 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 37) [ 472.723948][ T2774] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_tx_wq" 09:46:54 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x6000000, &(0x7f0000000e00)) 09:46:54 executing program 3: ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x9, "7f3194a29f67fad8ba1725c6ef0d523061bdc82feb73b98f0840dd1400e247bb4541ac545bf33699231db7c94e984cbf60524eb6e833db4378c767fc71c3f847"}) (async) syz_open_pts(0xffffffffffffffff, 0x400) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x80) 09:46:54 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) r1 = socket(0x1, 0x7, 0x2) sendmsg$can_j1939(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)="de09b13351e02500016ffbfead9ad1b81d7811b1211a1cb32bcea63a73086fe9604e2f15e2a302f5e3a47e806f5bac7aaaf32fe71b2c6b6b08fa19e4c9c36f2449a081595e62499af0f02f813feb557a98c00a0662c090451e8de20f4f76f4853240ea607c18ce866478e27f79de3992c1c0f17dfc16625ec13e8d1c04efa6125d7ee5eb224b4a6dd1948e1dc949bdf870c62e7e3f0e9388ee241a0b70dffea2d57bf9254d7812eddd10bb926be858a7096a3cbfe7d1b1ceb1ffaf5b3100c8941c14a7983ad2354214441b435645b79da8a967b8e97d04b84d959122985bbe01411ef84cf1380b359a8c229770606f7a", 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r3, 0x4b36) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x85, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000140)) (async, rerun: 64) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) (async, rerun: 64) sendto$phonet(r3, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x20000081, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r3, 0x58, &(0x7f0000000bc0)}, 0x10) (async, rerun: 32) recvmsg$can_j1939(r3, 0x0, 0x0) (rerun: 32) [ 472.879361][ T2821] FAULT_INJECTION: forcing a failure. [ 472.879361][ T2821] name failslab, interval 1, probability 0, space 0, times 0 [ 472.903816][ T2821] CPU: 0 PID: 2821 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 472.914033][ T2821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 472.924116][ T2821] Call Trace: [ 472.927415][ T2821] [ 472.930372][ T2821] dump_stack_lvl+0x125/0x1b0 [ 472.935106][ T2821] should_fail_ex+0x496/0x5b0 [ 472.939839][ T2821] should_failslab+0x9/0x20 [ 472.944392][ T2821] __kmem_cache_alloc_node+0x5f/0x470 [ 472.949801][ T2821] ? lockdep_init_map_type+0x16d/0x7c0 [ 472.955305][ T2821] ? worker_thread+0x1290/0x1290 [ 472.960284][ T2821] kmalloc_trace+0x25/0xe0 [ 472.964754][ T2821] __kthread_create_on_node+0xcb/0x400 [ 472.970252][ T2821] ? kthread_parkme+0xa0/0xa0 [ 472.974987][ T2821] ? worker_thread+0x1290/0x1290 [ 472.979966][ T2821] kthread_create_on_node+0xc8/0x100 [ 472.985279][ T2821] ? __kthread_create_on_node+0x400/0x400 [ 472.991028][ T2821] ? kasan_set_track+0x25/0x30 [ 472.995912][ T2821] init_rescuer+0xce/0x1f0 [ 473.000371][ T2821] alloc_workqueue+0xd35/0x1490 [ 473.005277][ T2821] ? workqueue_sysfs_register+0x400/0x400 [ 473.011118][ T2821] ? rcu_is_watching+0x12/0xb0 [ 473.015918][ T2821] nci_register_device+0x514/0xb80 [ 473.021722][ T2821] ? nci_init_complete_req+0x410/0x410 [ 473.027173][ T2821] ? lockdep_init_map_type+0x16d/0x7c0 [ 473.032635][ T2821] virtual_ncidev_open+0x147/0x220 [ 473.037831][ T2821] ? virtual_ncidev_read+0x4e0/0x4e0 [ 473.043115][ T2821] misc_open+0x3da/0x4c0 [ 473.047533][ T2821] ? misc_devnode+0x120/0x120 [ 473.052380][ T2821] chrdev_open+0x277/0x700 [ 473.056811][ T2821] ? __unregister_chrdev+0x100/0x100 [ 473.062112][ T2821] ? fsnotify_perm.part.0+0x25d/0x630 [ 473.067489][ T2821] ? fsnotify_perm.part.0+0x268/0x630 [ 473.072868][ T2821] do_dentry_open+0x88b/0x1730 [ 473.077723][ T2821] ? __unregister_chrdev+0x100/0x100 [ 473.083094][ T2821] ? may_open+0x1f2/0x400 [ 473.087439][ T2821] path_openat+0x19af/0x29c0 [ 473.092020][ T2821] ? path_lookupat+0x770/0x770 [ 473.096782][ T2821] do_filp_open+0x1de/0x430 [ 473.101319][ T2821] ? may_open_dev+0xf0/0xf0 [ 473.106000][ T2821] ? expand_files+0x442/0x910 [ 473.110687][ T2821] ? _raw_spin_unlock+0x28/0x40 [ 473.115566][ T2821] ? alloc_fd+0x2da/0x6c0 [ 473.119896][ T2821] do_sys_openat2+0x176/0x1e0 [ 473.124574][ T2821] ? build_open_flags+0x690/0x690 [ 473.129606][ T2821] __x64_sys_openat+0x175/0x210 [ 473.134459][ T2821] ? __ia32_sys_open+0x1e0/0x1e0 [ 473.139415][ T2821] ? ksys_write+0x1a7/0x250 [ 473.144069][ T2821] ? rcu_is_watching+0x12/0xb0 [ 473.148846][ T2821] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 473.154838][ T2821] do_syscall_64+0x38/0xb0 [ 473.159262][ T2821] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 473.165254][ T2821] RIP: 0033:0x7fafba27cae9 [ 473.169660][ T2821] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 473.189442][ T2821] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 473.197851][ T2821] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 473.205816][ T2821] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 473.213776][ T2821] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 473.221737][ T2821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 473.229696][ T2821] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 473.237791][ T2821] 09:46:55 executing program 2: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000002c0)) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x29) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="f8308d37129b34ede387f725ef0626c08fbf3391c66e94ec2a23ce50e448d8a9125600", @ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf2509000000240001800800030001000000080003000100000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="38000180140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030002000000080003000000000044000180140002007465616d5f736c6176655f3100000000080003000200000008000300010000001400020073797a5f74756e0000000000000000000800030000000000"], 0xd8}}, 0x4894) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:55 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x17) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000440)={0x4, 0x80000000, 0x8, 0x8000, 0x10, "be8a3e4737e10d430af4acea6cf5adaac5b3a7"}) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0xd, 0x11, 0xc7}) 09:46:55 executing program 3: ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x9, "7f3194a29f67fad8ba1725c6ef0d523061bdc82feb73b98f0840dd1400e247bb4541ac545bf33699231db7c94e984cbf60524eb6e833db4378c767fc71c3f847"}) syz_open_pts(0xffffffffffffffff, 0x400) (async) syz_open_pts(0xffffffffffffffff, 0x400) read$hidraw(0xffffffffffffffff, 0x0, 0x80) 09:46:55 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = socket(0x1, 0x7, 0x2) sendmsg$can_j1939(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)="de09b13351e02500016ffbfead9ad1b81d7811b1211a1cb32bcea63a73086fe9604e2f15e2a302f5e3a47e806f5bac7aaaf32fe71b2c6b6b08fa19e4c9c36f2449a081595e62499af0f02f813feb557a98c00a0662c090451e8de20f4f76f4853240ea607c18ce866478e27f79de3992c1c0f17dfc16625ec13e8d1c04efa6125d7ee5eb224b4a6dd1948e1dc949bdf870c62e7e3f0e9388ee241a0b70dffea2d57bf9254d7812eddd10bb926be858a7096a3cbfe7d1b1ceb1ffaf5b3100c8941c14a7983ad2354214441b435645b79da8a967b8e97d04b84d959122985bbe01411ef84cf1380b359a8c229770606f7a", 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r3, 0x4b36) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x85, 0x10000, 0x1}) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) sendto$phonet(r3, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x20000081, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r3, 0x58, &(0x7f0000000bc0)}, 0x10) recvmsg$can_j1939(r3, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) socket(0x1, 0x7, 0x2) (async) sendmsg$can_j1939(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)="de09b13351e02500016ffbfead9ad1b81d7811b1211a1cb32bcea63a73086fe9604e2f15e2a302f5e3a47e806f5bac7aaaf32fe71b2c6b6b08fa19e4c9c36f2449a081595e62499af0f02f813feb557a98c00a0662c090451e8de20f4f76f4853240ea607c18ce866478e27f79de3992c1c0f17dfc16625ec13e8d1c04efa6125d7ee5eb224b4a6dd1948e1dc949bdf870c62e7e3f0e9388ee241a0b70dffea2d57bf9254d7812eddd10bb926be858a7096a3cbfe7d1b1ceb1ffaf5b3100c8941c14a7983ad2354214441b435645b79da8a967b8e97d04b84d959122985bbe01411ef84cf1380b359a8c229770606f7a", 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r3, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x85, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) (async) sendto$phonet(r3, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x20000081, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r3, 0x58, &(0x7f0000000bc0)}, 0x10) (async) recvmsg$can_j1939(r3, 0x0, 0x0) (async) 09:46:55 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x7000000, &(0x7f0000000e00)) 09:46:55 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 38) 09:46:55 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x7f, 0x44000) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f00000000c0)={0x5f, "dd5fbc05697086572657e3ecf0ff439bc32d25ccddb9ffbb10885d442cf20e96d6f743ef823638db333df109b987cc5901423450efe2cba6ccf018e2f2032dc3"}) 09:46:55 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) (async) ioctl$TIOCMBIS(r0, 0x5416, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) (async) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x17) (async) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x17) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000440)={0x4, 0x80000000, 0x8, 0x8000, 0x10, "be8a3e4737e10d430af4acea6cf5adaac5b3a7"}) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0xd, 0x11, 0xc7}) 09:46:55 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000000c0)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0xffffffffffffff7f) recvmsg$can_j1939(r0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x50000025) 09:46:55 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x9940440, &(0x7f0000000e00)) [ 473.250157][ T2821] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -ENOMEM [ 473.477193][ T2856] FAULT_INJECTION: forcing a failure. [ 473.477193][ T2856] name failslab, interval 1, probability 0, space 0, times 0 [ 473.504926][ T2856] CPU: 0 PID: 2856 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 473.515049][ T2856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 473.525218][ T2856] Call Trace: [ 473.529298][ T2856] [ 473.532330][ T2856] dump_stack_lvl+0x125/0x1b0 [ 473.537049][ T2856] should_fail_ex+0x496/0x5b0 [ 473.541944][ T2856] should_failslab+0x9/0x20 [ 473.546486][ T2856] __kmem_cache_alloc_node+0x5f/0x470 [ 473.551889][ T2856] ? lockdep_init_map_type+0x16d/0x7c0 [ 473.557392][ T2856] ? worker_thread+0x1290/0x1290 [ 473.562463][ T2856] kmalloc_trace+0x25/0xe0 [ 473.567004][ T2856] __kthread_create_on_node+0xcb/0x400 [ 473.572591][ T2856] ? kthread_parkme+0xa0/0xa0 09:46:55 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7a60}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000045) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0xe, 0x3f, 0x922b, 0x21, @remote, @mcast1, 0x7820, 0x7800, 0xfffffff9, 0x188}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="040026bd7000ffdbdf25110000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="2c0001801400020000000000000000000000f7940e600000140002007866726d0000000000000000000000002c000180140300007465616d3000000000000000000000001400020076657468305f6d6163767461700000006400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="080003000100000008000300000000001400020076657468305f746f5f7465616d0000001400020064756d6d793000000000000000000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="08000300010000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x41}, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) [ 473.577390][ T2856] ? worker_thread+0x1290/0x1290 [ 473.582449][ T2856] kthread_create_on_node+0xc8/0x100 [ 473.587761][ T2856] ? __kthread_create_on_node+0x400/0x400 [ 473.593696][ T2856] ? kasan_set_track+0x25/0x30 [ 473.598488][ T2856] init_rescuer+0xce/0x1f0 [ 473.602937][ T2856] alloc_workqueue+0xd35/0x1490 [ 473.607830][ T2856] ? workqueue_sysfs_register+0x400/0x400 [ 473.613589][ T2856] ? rcu_is_watching+0x12/0xb0 [ 473.618385][ T2856] nci_register_device+0x514/0xb80 09:46:55 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x7f, 0x44000) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f00000000c0)={0x5f, "dd5fbc05697086572657e3ecf0ff439bc32d25ccddb9ffbb10885d442cf20e96d6f743ef823638db333df109b987cc5901423450efe2cba6ccf018e2f2032dc3"}) 09:46:55 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x17) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000440)={0x4, 0x80000000, 0x8, 0x8000, 0x10, "be8a3e4737e10d430af4acea6cf5adaac5b3a7"}) (async) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0xd, 0x11, 0xc7}) [ 473.623531][ T2856] ? nci_init_complete_req+0x410/0x410 [ 473.629020][ T2856] ? lockdep_init_map_type+0x16d/0x7c0 [ 473.634524][ T2856] virtual_ncidev_open+0x147/0x220 [ 473.639680][ T2856] ? virtual_ncidev_read+0x4e0/0x4e0 [ 473.645000][ T2856] misc_open+0x3da/0x4c0 [ 473.649273][ T2856] ? misc_devnode+0x120/0x120 [ 473.653977][ T2856] chrdev_open+0x277/0x700 [ 473.658419][ T2856] ? __unregister_chrdev+0x100/0x100 [ 473.663728][ T2856] ? fsnotify_perm.part.0+0x25d/0x630 [ 473.669133][ T2856] ? fsnotify_perm.part.0+0x268/0x630 [ 473.674542][ T2856] do_dentry_open+0x88b/0x1730 [ 473.679334][ T2856] ? __unregister_chrdev+0x100/0x100 [ 473.684658][ T2856] ? may_open+0x1f2/0x400 [ 473.689024][ T2856] path_openat+0x19af/0x29c0 [ 473.693644][ T2856] ? path_lookupat+0x770/0x770 [ 473.698449][ T2856] do_filp_open+0x1de/0x430 [ 473.702977][ T2856] ? may_open_dev+0xf0/0xf0 [ 473.707504][ T2856] ? expand_files+0x442/0x910 [ 473.712214][ T2856] ? _raw_spin_unlock+0x28/0x40 [ 473.717108][ T2856] ? alloc_fd+0x2da/0x6c0 [ 473.721469][ T2856] do_sys_openat2+0x176/0x1e0 09:46:55 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x7f, 0x44000) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f00000000c0)={0x5f, "dd5fbc05697086572657e3ecf0ff439bc32d25ccddb9ffbb10885d442cf20e96d6f743ef823638db333df109b987cc5901423450efe2cba6ccf018e2f2032dc3"}) [ 473.726175][ T2856] ? build_open_flags+0x690/0x690 [ 473.731236][ T2856] __x64_sys_openat+0x175/0x210 [ 473.736121][ T2856] ? __ia32_sys_open+0x1e0/0x1e0 [ 473.741086][ T2856] ? ksys_write+0x1a7/0x250 [ 473.745622][ T2856] ? rcu_is_watching+0x12/0xb0 [ 473.750414][ T2856] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 473.756423][ T2856] do_syscall_64+0x38/0xb0 [ 473.760882][ T2856] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 473.766827][ T2856] RIP: 0033:0x7fafba27cae9 09:46:55 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, "c8da6018b398304c"}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000000)={0x4e1, "39166ffbc6ae2d4858975c2e4cda490ba76505a57cedd1c2661937720d0f0e1b63416f67449a9648949caf0e95c601da20b671dfabfa7cdf02a25c282cab9146f5b00b6ae7ef876ef405bc59fbdaf27279b8066e9f1813302ce44b229a6fe134c45ecf6446bff98089a6662dc7a8c2d24bb3d421d49d96318d43d75f9477983bfff6755f032ec69c2e48091eadf65c7c5d65bbdec430316e03c9c381eb4a48cc2ebdab47945c7c5065a0e876df8f599d53970a3668a6cc8547ce05f6414ffc7c285625789b1417e4c9fee16a7a0788afb94d6c9d7089050cc6b96f973fe5b057a08e7d04756cb6e8757e4a4432083a4566717fa46aca2301e1b1d1a2233bd8c3d58eaff4ed3703c440bb973b57006dab855d3427c515467908b9e9abe4340d244f1f2d6ca2edb1ca09ea9142d2518eed4811e0e57cb6e01f82cdd8a3507904d6399064e55fca57421c1da89fd91772cc40864fc92dd665ac4d8e01207db1f2e5d625de7832eb36c20e8ba0508c0af6385b1b41bb5545039544b7cc320b80a87de2d310184ec7ac2c088486c6e2cbb0736f3ce87e188bfb1f9d707d5a0d90c102484d7e9ed1c85ef4436a5e782112d7eca36ffce16f12b1cda31a405b589e774f1c622e6328130a008abbc8be769f64d5e95e5d1587486bb22a4cbe4438ed5cfc424ae23d1a9a93988b385b969a2d60fa63c79c52392ec4a858f94dcc99dd239852ef30fca3f1ee495a098e40bc24ae89ab2591653355b97b27160ea056892e6a4c2255a8296acf0635b606a9d93a880feeaf5c61a91ddab0e2b87afa161ddf4655c7b4bbfb2c6830335cc027095abf894451699b07dc4fcd99ab214d194e03ace2b08215785a1fbe43aabc4dfac6bd994bdbcb5b6604ad9cdb45feae609a265a79cb838656ec8e9732f4c561f90c5ac83354b3bc13cba6afcf65adb3727411a5247aa6cf6e9ff9ef245ac9783400033bbb4ebb1eb7e4f98ad98e8df8e802479b4b72d442a068933a73094807041a70c202f1830300be459843611a5d360eda63cb5ebd61444de599fb336b6c3a956ab961fe29a76d4b0897614fb947e0e2fa8fb70e0f30aeb57e2a4940702d5bf27b76305d2698a36f7636176000d090b8a1d6e0d09e2c7a4b39827a098088a8de39e7b8b9bfc5322e7796bfa44d468f8a91289e6bb3d1ce5f06502f2dfcac03506345b7d46b1f861f2e4ae204fee463e21e9518f44657d30ba1908830e6794d87f9880916d7472abfd428772d55a18208eb0db879486d4817ceb6866d88d000ef886e6b5ab0003d360b10640a9716dafde39459973a13866a0ec2cc770486cbe540522c7344d3a6d34c477e267a472a27e6d9619ac7ee09eda607167adf1902de3aa3b78d2e2988a3fed7f13f3c5387ac975296120ad2caaceb4d1dca28fd29e6824aa0b3ddd5ed3f6c820a798e78fdfc98b207e09cfa6fcb404b02bfc8da5ab8cf9dfeb3ef7e435f822244899cc8cbd34197d95fc04facae7001f1e01e7770f48e8a353ee62575e5fd64ce394db97604db7b329af6da60c5c602ce1a3ae873f084f5f03abeecff92075e497cf9968926e9b534e8d00f10756889537045ba09116cc9bbaa5979ac8c86c9a696d03d037cf246aa5ebf01b2fac509de7dd62fdb0a17d9bc15dbf18b23c8b16f00679eeedf35dd362015ac2da5663f6d2532a1719a8727e5c23341f0d637a76eeec41ed5ce912303ae88bc2ec6928ff13b74750de8c132b52cf52df3b68a824c14283fb42839b46e"}) read$hidraw(0xffffffffffffffff, 0x0, 0xfffffe42) write$hidraw(r2, &(0x7f0000000500)="bab3ca7e9b713b8ca6c447834b75e72f91dcd4f1c37900385301c3ff54df68561ada8fb8b0dda1531a0fd2f690e7d79af62b8c90a1e23b9543895d63c10ef146b4620c3e54864b585ae8f39f2a725a7ff99839a5884ee0be3d795c", 0x5b) [ 473.771264][ T2856] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 473.790982][ T2856] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 473.799425][ T2856] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 473.807424][ T2856] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 473.815939][ T2856] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 09:46:55 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x1800) [ 473.823935][ T2856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 473.831928][ T2856] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 473.839926][ T2856] 09:46:55 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000000c0)=0x4) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0xffffffffffffff7f) recvmsg$can_j1939(r0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x50000025) [ 473.876715][ T27] audit: type=1400 audit(1693734415.650:149): avc: denied { create } for pid=2871 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 09:46:55 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 39) 09:46:55 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, "c8da6018b398304c"}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000000)={0x4e1, "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"}) read$hidraw(0xffffffffffffffff, 0x0, 0xfffffe42) write$hidraw(r2, &(0x7f0000000500)="bab3ca7e9b713b8ca6c447834b75e72f91dcd4f1c37900385301c3ff54df68561ada8fb8b0dda1531a0fd2f690e7d79af62b8c90a1e23b9543895d63c10ef146b4620c3e54864b585ae8f39f2a725a7ff99839a5884ee0be3d795c", 0x5b) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, "c8da6018b398304c"}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000000)={0x4e1, "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"}) (async) read$hidraw(0xffffffffffffffff, 0x0, 0xfffffe42) (async) write$hidraw(r2, &(0x7f0000000500)="bab3ca7e9b713b8ca6c447834b75e72f91dcd4f1c37900385301c3ff54df68561ada8fb8b0dda1531a0fd2f690e7d79af62b8c90a1e23b9543895d63c10ef146b4620c3e54864b585ae8f39f2a725a7ff99839a5884ee0be3d795c", 0x5b) (async) 09:46:55 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x1800) 09:46:55 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7a60}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000045) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0xe, 0x3f, 0x922b, 0x21, @remote, @mcast1, 0x7820, 0x7800, 0xfffffff9, 0x188}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="040026bd7000ffdbdf25110000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="2c0001801400020000000000000000000000f7940e600000140002007866726d0000000000000000000000002c000180140300007465616d3000000000000000000000001400020076657468305f6d6163767461700000006400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="080003000100000008000300000000001400020076657468305f746f5f7465616d0000001400020064756d6d793000000000000000000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="08000300010000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x41}, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7a60}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000045) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0xe, 0x3f, 0x922b, 0x21, @remote, @mcast1, 0x7820, 0x7800, 0xfffffff9, 0x188}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="040026bd7000ffdbdf25110000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="2c0001801400020000000000000000000000f7940e600000140002007866726d0000000000000000000000002c000180140300007465616d3000000000000000000000001400020076657468305f6d6163767461700000006400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="080003000100000008000300000000001400020076657468305f746f5f7465616d0000001400020064756d6d793000000000000000000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="08000300010000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x41}, 0x800) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (async) 09:46:55 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0xb6620c0, &(0x7f0000000e00)) 09:46:55 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x1800) 09:46:55 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, "c8da6018b398304c"}) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000000)={0x4e1, "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"}) (async) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000000)={0x4e1, "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"}) read$hidraw(0xffffffffffffffff, 0x0, 0xfffffe42) write$hidraw(r2, &(0x7f0000000500)="bab3ca7e9b713b8ca6c447834b75e72f91dcd4f1c37900385301c3ff54df68561ada8fb8b0dda1531a0fd2f690e7d79af62b8c90a1e23b9543895d63c10ef146b4620c3e54864b585ae8f39f2a725a7ff99839a5884ee0be3d795c", 0x5b) 09:46:55 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000000c0)=0x4) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async, rerun: 32) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (rerun: 32) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0xffffffffffffff7f) (async) recvmsg$can_j1939(r0, 0x0, 0x0) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x50000025) [ 473.907377][ T2856] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -ENOMEM [ 474.086465][ T2910] FAULT_INJECTION: forcing a failure. [ 474.086465][ T2910] name failslab, interval 1, probability 0, space 0, times 0 09:46:55 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000300)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r1}, 0x8) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f00000002c0)) read$hidraw(r1, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000200)) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0xfffffffffffffe7b) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfff, 0x4400) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000100)="fd9a3e45c26d10efd4e5292e3c97a40e1f3b50ba2127a03c63cd7c334377ce63e15d5687ab332832b7514980b28eb819081a2a1fc12eadb7571b1cea60da99eec8b20841856f6c94b9a9ba8f18450ba73efc7f33e6ae8b3667e0184d7a8e2c56932f2e6df93f637e8b09683b0895f80ec5c88c6adfdd897326b2a385e693c51d1656b12f66b45ee81a62bcd39a0a7deff47eafcc25a000d93c827528ca9c7779d3aa2d22ef889d6108ccb1") ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x4, "7e87ab80e95441d573aae84d9a59d6d3c4e60e01d2271f791c3c64aaff6924f12f299084ae2bc366b96d33b6456fe6a9ad6bef5125edb2a23f9b00"}) 09:46:55 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) [ 474.182212][ T2910] CPU: 0 PID: 2910 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 474.192337][ T2910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 474.202677][ T2910] Call Trace: [ 474.205978][ T2910] [ 474.209017][ T2910] dump_stack_lvl+0x125/0x1b0 [ 474.213737][ T2910] should_fail_ex+0x496/0x5b0 [ 474.218458][ T2910] should_failslab+0x9/0x20 [ 474.222993][ T2910] __kmem_cache_alloc_node+0x5f/0x470 09:46:56 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x21, 0x80000, 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000680), &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r3 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x7, 0x200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000009c0), &(0x7f0000000a80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000a40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdd251100000018000180140002006d619cd34c91328443f9da63766c616e3000000000000000004c0001800800010095a6628a8aa8aaa8fdb3fc901c27496e78ae058f8ad95fad642f87d737a6bf765dce1d4105c0c3d2ed86f5e85b84535ade0c910e33fce23c3c416442e026865b6cfef635c63560827ff76aa9d1a1af4ba19402f67347d40e8068f497cf43f646802fd4c194f902f1413990cdfe98d981fe613edebda8d8c4c794ca20a11ba2ed0d7aaf2eb1f9645b94a89d433f4dbf6d5555949362b97bcb182a6318ce4d384de96ca45abfbca373711134e98847739ce307396098", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14000200776731000000000000000000000000005400018008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000030000180140002006e723000000000000000000000000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="08000300030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x108}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000010) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/209, 0xd1}, {&(0x7f0000000180)=""/22, 0x16}, {&(0x7f00000001c0)=""/80, 0x50}], 0x3, &(0x7f0000000280)=""/154, 0x9a}, 0x10043) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r5 = memfd_create(&(0x7f00000003c0)=']:\x00', 0x0) r6 = memfd_create(&(0x7f0000000400)='\x00', 0x6) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000440)={0x0, 0x5, [{r4, 0x0, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x10000, 0x4000}, {r5, 0x0, 0x2000, 0x4000}, {0xffffffffffffffff, 0x0, 0x4000, 0xfffffffffffff000}, {r6, 0x0, 0x8000, 0x1000}]}) [ 474.228397][ T2910] ? lockdep_init_map_type+0x16d/0x7c0 [ 474.233895][ T2910] ? worker_thread+0x1290/0x1290 [ 474.238864][ T2910] kmalloc_trace+0x25/0xe0 [ 474.243417][ T2910] __kthread_create_on_node+0xcb/0x400 [ 474.248906][ T2910] ? kthread_parkme+0xa0/0xa0 [ 474.253618][ T2910] ? worker_thread+0x1290/0x1290 [ 474.258589][ T2910] kthread_create_on_node+0xc8/0x100 [ 474.263913][ T2910] ? __kthread_create_on_node+0x400/0x400 [ 474.269678][ T2910] ? kasan_set_track+0x25/0x30 [ 474.274051][ T2932] syz-executor.4[2932]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 474.274457][ T2910] init_rescuer+0xce/0x1f0 [ 474.274492][ T2910] alloc_workqueue+0xd35/0x1490 [ 474.293315][ T2910] ? workqueue_sysfs_register+0x400/0x400 [ 474.293434][ T27] audit: type=1400 audit(1693734416.060:150): avc: denied { create } for pid=2931 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 474.299138][ T2910] ? rcu_is_watching+0x12/0xb0 [ 474.299162][ T2910] nci_register_device+0x514/0xb80 [ 474.328815][ T2910] ? nci_init_complete_req+0x410/0x410 [ 474.334307][ T2910] ? lockdep_init_map_type+0x16d/0x7c0 [ 474.339810][ T2910] virtual_ncidev_open+0x147/0x220 [ 474.344964][ T2910] ? virtual_ncidev_read+0x4e0/0x4e0 [ 474.350304][ T2910] misc_open+0x3da/0x4c0 [ 474.354579][ T2910] ? misc_devnode+0x120/0x120 [ 474.359286][ T2910] chrdev_open+0x277/0x700 [ 474.363736][ T2910] ? __unregister_chrdev+0x100/0x100 [ 474.369057][ T2910] ? fsnotify_perm.part.0+0x25d/0x630 [ 474.374466][ T2910] ? fsnotify_perm.part.0+0x268/0x630 [ 474.379879][ T2910] do_dentry_open+0x88b/0x1730 [ 474.384681][ T2910] ? __unregister_chrdev+0x100/0x100 [ 474.389996][ T2910] ? may_open+0x1f2/0x400 [ 474.394369][ T2910] path_openat+0x19af/0x29c0 [ 474.398997][ T2910] ? path_lookupat+0x770/0x770 [ 474.403804][ T2910] do_filp_open+0x1de/0x430 [ 474.408334][ T2910] ? may_open_dev+0xf0/0xf0 [ 474.412873][ T2910] ? expand_files+0x442/0x910 [ 474.417593][ T2910] ? _raw_spin_unlock+0x28/0x40 [ 474.422473][ T2910] ? alloc_fd+0x2da/0x6c0 [ 474.426837][ T2910] do_sys_openat2+0x176/0x1e0 [ 474.431542][ T2910] ? build_open_flags+0x690/0x690 [ 474.436700][ T2910] __x64_sys_openat+0x175/0x210 [ 474.441581][ T2910] ? __ia32_sys_open+0x1e0/0x1e0 [ 474.446546][ T2910] ? ksys_write+0x1a7/0x250 [ 474.451083][ T2910] ? rcu_is_watching+0x12/0xb0 [ 474.455873][ T2910] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 474.461882][ T2910] do_syscall_64+0x38/0xb0 [ 474.466338][ T2910] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 474.472267][ T2910] RIP: 0033:0x7fafba27cae9 09:46:56 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000300)) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r1, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r1}, 0x8) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f00000002c0)) (async) read$hidraw(r1, 0x0, 0x0) (async) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000200)) (async) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0xfffffffffffffe7b) (async) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfff, 0x4400) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000100)="fd9a3e45c26d10efd4e5292e3c97a40e1f3b50ba2127a03c63cd7c334377ce63e15d5687ab332832b7514980b28eb819081a2a1fc12eadb7571b1cea60da99eec8b20841856f6c94b9a9ba8f18450ba73efc7f33e6ae8b3667e0184d7a8e2c56932f2e6df93f637e8b09683b0895f80ec5c88c6adfdd897326b2a385e693c51d1656b12f66b45ee81a62bcd39a0a7deff47eafcc25a000d93c827528ca9c7779d3aa2d22ef889d6108ccb1") (async) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x4, "7e87ab80e95441d573aae84d9a59d6d3c4e60e01d2271f791c3c64aaff6924f12f299084ae2bc366b96d33b6456fe6a9ad6bef5125edb2a23f9b00"}) [ 474.476706][ T2910] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 474.496434][ T2910] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 474.505144][ T2910] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 474.513139][ T2910] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 474.521138][ T2910] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 474.529142][ T2910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 474.537222][ T2910] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 474.545320][ T2910] [ 474.551929][ T2933] syz-executor.4[2933]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 474.579268][ T2910] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -ENOMEM [ 474.581073][ T2912] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR 09:46:56 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 40) 09:46:56 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x21, 0x80000, 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000680), &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r3 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x7, 0x200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000009c0), &(0x7f0000000a80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000a40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdd251100000018000180140002006d619cd34c91328443f9da63766c616e3000000000000000004c0001800800010095a6628a8aa8aaa8fdb3fc901c27496e78ae058f8ad95fad642f87d737a6bf765dce1d4105c0c3d2ed86f5e85b84535ade0c910e33fce23c3c416442e026865b6cfef635c63560827ff76aa9d1a1af4ba19402f67347d40e8068f497cf43f646802fd4c194f902f1413990cdfe98d981fe613edebda8d8c4c794ca20a11ba2ed0d7aaf2eb1f9645b94a89d433f4dbf6d5555949362b97bcb182a6318ce4d384de96ca45abfbca373711134e98847739ce307396098", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14000200776731000000000000000000000000005400018008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000030000180140002006e723000000000000000000000000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="08000300030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x108}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000010) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/209, 0xd1}, {&(0x7f0000000180)=""/22, 0x16}, {&(0x7f00000001c0)=""/80, 0x50}], 0x3, &(0x7f0000000280)=""/154, 0x9a}, 0x10043) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r5 = memfd_create(&(0x7f00000003c0)=']:\x00', 0x0) r6 = memfd_create(&(0x7f0000000400)='\x00', 0x6) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000440)={0x0, 0x5, [{r4, 0x0, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x10000, 0x4000}, {r5, 0x0, 0x2000, 0x4000}, {0xffffffffffffffff, 0x0, 0x4000, 0xfffffffffffff000}, {r6, 0x0, 0x8000, 0x1000}]}) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x21, 0x80000, 0x8) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000680), &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) (async) syz_open_dev$vcsu(&(0x7f00000005c0), 0x7, 0x200) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000009c0), &(0x7f0000000a80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000a40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdd251100000018000180140002006d619cd34c91328443f9da63766c616e3000000000000000004c0001800800010095a6628a8aa8aaa8fdb3fc901c27496e78ae058f8ad95fad642f87d737a6bf765dce1d4105c0c3d2ed86f5e85b84535ade0c910e33fce23c3c416442e026865b6cfef635c63560827ff76aa9d1a1af4ba19402f67347d40e8068f497cf43f646802fd4c194f902f1413990cdfe98d981fe613edebda8d8c4c794ca20a11ba2ed0d7aaf2eb1f9645b94a89d433f4dbf6d5555949362b97bcb182a6318ce4d384de96ca45abfbca373711134e98847739ce307396098", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14000200776731000000000000000000000000005400018008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000030000180140002006e723000000000000000000000000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="08000300030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x108}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000010) (async) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/209, 0xd1}, {&(0x7f0000000180)=""/22, 0x16}, {&(0x7f00000001c0)=""/80, 0x50}], 0x3, &(0x7f0000000280)=""/154, 0x9a}, 0x10043) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) (async) memfd_create(&(0x7f00000003c0)=']:\x00', 0x0) (async) memfd_create(&(0x7f0000000400)='\x00', 0x6) (async) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000440)={0x0, 0x5, [{r4, 0x0, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x10000, 0x4000}, {r5, 0x0, 0x2000, 0x4000}, {0xffffffffffffffff, 0x0, 0x4000, 0xfffffffffffff000}, {r6, 0x0, 0x8000, 0x1000}]}) (async) 09:46:56 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) (async) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) (async) [ 474.600012][ T2921] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 474.663418][ T2951] syz-executor.4[2951]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 474.690148][ T2951] syz-executor.4[2951]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 09:46:56 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7a60}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000045) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0xe, 0x3f, 0x922b, 0x21, @remote, @mcast1, 0x7820, 0x7800, 0xfffffff9, 0x188}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="040026bd7000ffdbdf25110000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="2c0001801400020000000000000000000000f7940e600000140002007866726d0000000000000000000000002c000180140300007465616d3000000000000000000000001400020076657468305f6d6163767461700000006400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="080003000100000008000300000000001400020076657468305f746f5f7465616d0000001400020064756d6d793000000000000000000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="08000300010000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x41}, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:46:56 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000300)) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r1, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r1}, 0x8) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f00000002c0)) (async) read$hidraw(r1, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000080)) (async) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000200)) (async) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0xfffffffffffffe7b) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfff, 0x4400) (async) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000100)="fd9a3e45c26d10efd4e5292e3c97a40e1f3b50ba2127a03c63cd7c334377ce63e15d5687ab332832b7514980b28eb819081a2a1fc12eadb7571b1cea60da99eec8b20841856f6c94b9a9ba8f18450ba73efc7f33e6ae8b3667e0184d7a8e2c56932f2e6df93f637e8b09683b0895f80ec5c88c6adfdd897326b2a385e693c51d1656b12f66b45ee81a62bcd39a0a7deff47eafcc25a000d93c827528ca9c7779d3aa2d22ef889d6108ccb1") (async, rerun: 64) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x4, "7e87ab80e95441d573aae84d9a59d6d3c4e60e01d2271f791c3c64aaff6924f12f299084ae2bc366b96d33b6456fe6a9ad6bef5125edb2a23f9b00"}) (rerun: 64) 09:46:56 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0xd942040, &(0x7f0000000e00)) [ 474.708792][ T2948] FAULT_INJECTION: forcing a failure. [ 474.708792][ T2948] name failslab, interval 1, probability 0, space 0, times 0 [ 474.732770][ T2948] CPU: 1 PID: 2948 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 474.742806][ T2948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 474.752878][ T2948] Call Trace: [ 474.756176][ T2948] [ 474.759127][ T2948] dump_stack_lvl+0x125/0x1b0 09:46:56 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) (async) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) [ 474.763849][ T2948] should_fail_ex+0x496/0x5b0 [ 474.768573][ T2948] ? __kthread_create_on_node+0x189/0x400 [ 474.774338][ T2948] ? __kthread_create_on_node+0x189/0x400 [ 474.780120][ T2948] should_failslab+0x9/0x20 [ 474.784672][ T2948] __kmem_cache_alloc_node+0x5f/0x470 [ 474.790076][ T2948] ? pointer+0xbf0/0xbf0 [ 474.794396][ T2948] ? __kthread_create_on_node+0x189/0x400 [ 474.795672][ T2951] syz-executor.4[2951]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 474.800130][ T2948] __kmalloc_node_track_caller+0x50/0x100 [ 474.815428][ T2948] kvasprintf+0xbd/0x150 [ 474.819716][ T2948] ? bust_spinlocks+0xe0/0xe0 [ 474.824449][ T2948] ? worker_thread+0x1290/0x1290 [ 474.829507][ T2948] __kthread_create_on_node+0x189/0x400 [ 474.835088][ T2948] ? kthread_parkme+0xa0/0xa0 [ 474.839798][ T2948] ? worker_thread+0x1290/0x1290 [ 474.844771][ T2948] kthread_create_on_node+0xc8/0x100 [ 474.850187][ T2948] ? __kthread_create_on_node+0x400/0x400 [ 474.855945][ T2948] ? kasan_set_track+0x25/0x30 09:46:56 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x1800) [ 474.860837][ T2948] init_rescuer+0xce/0x1f0 [ 474.862672][ T2959] syz-executor.4[2959]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 474.865269][ T2948] alloc_workqueue+0xd35/0x1490 [ 474.865314][ T2948] ? workqueue_sysfs_register+0x400/0x400 [ 474.865353][ T2948] ? rcu_is_watching+0x12/0xb0 [ 474.890578][ T2948] nci_register_device+0x514/0xb80 [ 474.896002][ T2948] ? nci_init_complete_req+0x410/0x410 [ 474.901586][ T2948] ? lockdep_init_map_type+0x16d/0x7c0 [ 474.907095][ T2948] virtual_ncidev_open+0x147/0x220 09:46:56 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket(0x21, 0x80000, 0x8) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000680), &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) (async) r3 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x7, 0x200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000009c0), &(0x7f0000000a80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000a40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdd251100000018000180140002006d619cd34c91328443f9da63766c616e3000000000000000004c0001800800010095a6628a8aa8aaa8fdb3fc901c27496e78ae058f8ad95fad642f87d737a6bf765dce1d4105c0c3d2ed86f5e85b84535ade0c910e33fce23c3c416442e026865b6cfef635c63560827ff76aa9d1a1af4ba19402f67347d40e8068f497cf43f646802fd4c194f902f1413990cdfe98d981fe613edebda8d8c4c794ca20a11ba2ed0d7aaf2eb1f9645b94a89d433f4dbf6d5555949362b97bcb182a6318ce4d384de96ca45abfbca373711134e98847739ce307396098", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14000200776731000000000000000000000000005400018008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000030000180140002006e723000000000000000000000000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="08000300030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x108}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000010) (async) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/209, 0xd1}, {&(0x7f0000000180)=""/22, 0x16}, {&(0x7f00000001c0)=""/80, 0x50}], 0x3, &(0x7f0000000280)=""/154, 0x9a}, 0x10043) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) (async) r5 = memfd_create(&(0x7f00000003c0)=']:\x00', 0x0) (async) r6 = memfd_create(&(0x7f0000000400)='\x00', 0x6) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000440)={0x0, 0x5, [{r4, 0x0, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x10000, 0x4000}, {r5, 0x0, 0x2000, 0x4000}, {0xffffffffffffffff, 0x0, 0x4000, 0xfffffffffffff000}, {r6, 0x0, 0x8000, 0x1000}]}) [ 474.912262][ T2948] ? virtual_ncidev_read+0x4e0/0x4e0 [ 474.917588][ T2948] misc_open+0x3da/0x4c0 [ 474.921883][ T2948] ? misc_devnode+0x120/0x120 [ 474.926769][ T2948] chrdev_open+0x277/0x700 [ 474.931741][ T2948] ? __unregister_chrdev+0x100/0x100 [ 474.937235][ T2948] ? fsnotify_perm.part.0+0x25d/0x630 [ 474.942654][ T2948] ? fsnotify_perm.part.0+0x268/0x630 [ 474.948598][ T2948] do_dentry_open+0x88b/0x1730 [ 474.953405][ T2948] ? __unregister_chrdev+0x100/0x100 [ 474.958735][ T2948] ? may_open+0x1f2/0x400 09:46:56 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x1800) [ 474.963122][ T2948] path_openat+0x19af/0x29c0 [ 474.967756][ T2948] ? path_lookupat+0x770/0x770 [ 474.972578][ T2948] do_filp_open+0x1de/0x430 [ 474.978256][ T2948] ? may_open_dev+0xf0/0xf0 [ 474.982803][ T2948] ? expand_files+0x442/0x910 [ 474.987536][ T2948] ? _raw_spin_unlock+0x28/0x40 [ 474.992602][ T2948] ? alloc_fd+0x2da/0x6c0 [ 474.996972][ T2948] do_sys_openat2+0x176/0x1e0 [ 475.001686][ T2948] ? build_open_flags+0x690/0x690 [ 475.006968][ T2948] __x64_sys_openat+0x175/0x210 [ 475.012026][ T2948] ? __ia32_sys_open+0x1e0/0x1e0 [ 475.017085][ T2948] ? ksys_write+0x1a7/0x250 [ 475.021633][ T2948] ? rcu_is_watching+0x12/0xb0 [ 475.026431][ T2948] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 475.032591][ T2948] do_syscall_64+0x38/0xb0 [ 475.037063][ T2948] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 475.043019][ T2948] RIP: 0033:0x7fafba27cae9 09:46:56 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x1800) [ 475.047464][ T2948] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 475.067588][ T2948] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 475.076035][ T2948] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 475.084125][ T2948] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 475.092216][ T2948] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 475.100383][ T2948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 475.108380][ T2948] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 475.116392][ T2948] 09:46:56 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000001100)=':-$\x00') ioctl$TCSBRKP(r1, 0x5425, 0x2) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x6, 0x4, 0x401, 0x5, 0x82, 0xa0}) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/4126}) [ 475.140271][ T2979] syz-executor.4[2979]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 475.150261][ T2980] syz-executor.4[2980]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 09:46:57 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 41) 09:46:57 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x1, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x80) 09:46:57 executing program 4: syz_open_dev$hiddev(&(0x7f0000000040), 0x2000000000000000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x3286, r0}, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x8c) 09:46:57 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x103000) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e00)) r1 = syz_open_pts(0xffffffffffffffff, 0x109100) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x8) 09:46:57 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x10000000, &(0x7f0000000e00)) 09:46:57 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x1, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x80) 09:46:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) (async, rerun: 32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) prctl$PR_SET_NAME(0xf, &(0x7f0000001100)=':-$\x00') (async) ioctl$TCSBRKP(r1, 0x5425, 0x2) (async, rerun: 64) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x6, 0x4, 0x401, 0x5, 0x82, 0xa0}) (async, rerun: 64) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/4126}) 09:46:57 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x103000) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e00)) (async) r1 = syz_open_pts(0xffffffffffffffff, 0x109100) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x8) 09:46:57 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x1, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x80) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x1, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x80) (async) 09:46:57 executing program 4: syz_open_dev$hiddev(&(0x7f0000000040), 0x2000000000000000, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x3286, r0}, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) (async, rerun: 64) ioctl$TIOCMBIS(r1, 0x5416, 0x0) (async, rerun: 64) ioctl$KDSKBLED(r1, 0x4b65, 0x8c) [ 475.189528][ T2948] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -ENOMEM [ 475.358929][ T27] audit: type=1400 audit(1693734417.150:151): avc: denied { create } for pid=2993 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 09:46:57 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) 09:46:57 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x103000) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e00)) r1 = syz_open_pts(0xffffffffffffffff, 0x109100) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x8) syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x103000) (async) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e00)) (async) syz_open_pts(0xffffffffffffffff, 0x109100) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x8) (async) [ 475.445369][ T27] audit: type=1400 audit(1693734417.190:152): avc: denied { write } for pid=2993 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 475.513295][ T3009] FAULT_INJECTION: forcing a failure. [ 475.513295][ T3009] name failslab, interval 1, probability 0, space 0, times 0 [ 475.558928][ T3009] CPU: 1 PID: 3009 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 475.569063][ T3009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 475.579248][ T3009] Call Trace: [ 475.582633][ T3009] [ 475.585582][ T3009] dump_stack_lvl+0x125/0x1b0 [ 475.590299][ T3009] should_fail_ex+0x496/0x5b0 [ 475.595024][ T3009] should_failslab+0x9/0x20 [ 475.599659][ T3009] __kmem_cache_alloc_node+0x5f/0x470 [ 475.605082][ T3009] ? lock_acquire+0x464/0x510 [ 475.609799][ T3009] kmalloc_trace+0x25/0xe0 [ 475.614258][ T3009] device_add+0xd18/0x1ac0 [ 475.618809][ T3009] ? reacquire_held_locks+0x4b0/0x4b0 [ 475.624233][ T3009] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 475.631222][ T3009] ? lockdep_init_map_type+0x16d/0x7c0 [ 475.636753][ T3009] nfc_register_device+0x41/0x3c0 [ 475.641819][ T3009] nci_register_device+0x7f4/0xb80 [ 475.646971][ T3009] ? nci_init_complete_req+0x410/0x410 [ 475.652988][ T3009] ? lockdep_init_map_type+0x16d/0x7c0 [ 475.658500][ T3009] virtual_ncidev_open+0x147/0x220 [ 475.663830][ T3009] ? virtual_ncidev_read+0x4e0/0x4e0 [ 475.669346][ T3009] misc_open+0x3da/0x4c0 [ 475.673628][ T3009] ? misc_devnode+0x120/0x120 [ 475.678336][ T3009] chrdev_open+0x277/0x700 [ 475.682789][ T3009] ? __unregister_chrdev+0x100/0x100 [ 475.688114][ T3009] ? fsnotify_perm.part.0+0x25d/0x630 [ 475.693544][ T3009] ? fsnotify_perm.part.0+0x268/0x630 [ 475.698956][ T3009] do_dentry_open+0x88b/0x1730 [ 475.703797][ T3009] ? __unregister_chrdev+0x100/0x100 [ 475.709122][ T3009] ? may_open+0x1f2/0x400 [ 475.713508][ T3009] path_openat+0x19af/0x29c0 [ 475.718130][ T3009] ? path_lookupat+0x770/0x770 [ 475.722941][ T3009] do_filp_open+0x1de/0x430 [ 475.727488][ T3009] ? may_open_dev+0xf0/0xf0 [ 475.732026][ T3009] ? expand_files+0x442/0x910 [ 475.736800][ T3009] ? _raw_spin_unlock+0x28/0x40 [ 475.741812][ T3009] ? alloc_fd+0x2da/0x6c0 [ 475.746178][ T3009] do_sys_openat2+0x176/0x1e0 [ 475.750978][ T3009] ? build_open_flags+0x690/0x690 [ 475.756041][ T3009] __x64_sys_openat+0x175/0x210 [ 475.760928][ T3009] ? __ia32_sys_open+0x1e0/0x1e0 [ 475.765917][ T3009] ? ksys_write+0x1a7/0x250 [ 475.770509][ T3009] ? rcu_is_watching+0x12/0xb0 [ 475.775305][ T3009] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 475.781324][ T3009] do_syscall_64+0x38/0xb0 [ 475.785798][ T3009] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 475.791920][ T3009] RIP: 0033:0x7fafba27cae9 [ 475.796364][ T3009] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 475.816114][ T3009] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 475.824836][ T3009] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 475.832932][ T3009] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 475.840944][ T3009] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 475.849028][ T3009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 475.857039][ T3009] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 475.865225][ T3009] 09:46:57 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 42) 09:46:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000001100)=':-$\x00') ioctl$TCSBRKP(r1, 0x5425, 0x2) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x6, 0x4, 0x401, 0x5, 0x82, 0xa0}) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/4126}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCMBIS(r0, 0x5416, 0x0) (async) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000001100)=':-$\x00') (async) ioctl$TCSBRKP(r1, 0x5425, 0x2) (async) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x6, 0x4, 0x401, 0x5, 0x82, 0xa0}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) (async) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/4126}) (async) 09:46:57 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCMBIS(r0, 0x5416, 0x0) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) (async) 09:46:57 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x1b540000, &(0x7f0000000e00)) 09:46:57 executing program 4: syz_open_dev$hiddev(&(0x7f0000000040), 0x2000000000000000, 0x0) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x3286, r0}, 0x0) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) (async) ioctl$TIOCMBIS(r1, 0x5416, 0x0) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x8c) 09:46:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) 09:46:57 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) 09:46:57 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000180)={0x0, r1}, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x74b100, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) 09:46:57 executing program 5: syz_open_dev$hidraw(&(0x7f0000000440), 0xf81, 0x400180) r0 = syz_open_dev$vcsu(&(0x7f0000000500), 0x5, 0x10000) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000220008002700000000dbdf250a14102be800000004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x28514be957777a6}, 0x40) syz_open_dev$vcsu(&(0x7f0000000700), 0x9, 0x4000) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000480)) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000640)={0x2, 0x0, 0x10000}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000004c0)={0x1, 0x200, 0x1}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x109000, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000680)={0x3, 0x1, 0x7d9}) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000400)={0x77, 0x11, &(0x7f0000000000)="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"}) [ 476.169469][ T3059] FAULT_INJECTION: forcing a failure. [ 476.169469][ T3059] name failslab, interval 1, probability 0, space 0, times 0 [ 476.194469][ T3059] CPU: 1 PID: 3059 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 476.204606][ T3059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 476.214815][ T3059] Call Trace: [ 476.218209][ T3059] [ 476.221361][ T3059] dump_stack_lvl+0x125/0x1b0 [ 476.226090][ T3059] should_fail_ex+0x496/0x5b0 [ 476.230813][ T3059] should_failslab+0x9/0x20 [ 476.235546][ T3059] kmem_cache_alloc+0x61/0x400 [ 476.240353][ T3059] __kernfs_new_node+0xd3/0x8a0 [ 476.245243][ T3059] ? kernfs_path_from_node+0x60/0x60 [ 476.250916][ T3059] ? stack_trace_save+0x96/0xd0 [ 476.255985][ T3059] ? rcu_is_watching+0x12/0xb0 [ 476.260782][ T3059] ? lock_acquire+0x464/0x510 [ 476.265480][ T3059] ? lock_sync+0x190/0x190 [ 476.269918][ T3059] kernfs_create_dir_ns+0x9a/0x210 [ 476.275043][ T3059] sysfs_create_dir_ns+0x13b/0x2a0 [ 476.280168][ T3059] ? sysfs_create_mount_point+0xb0/0xb0 [ 476.285728][ T3059] ? spin_bug+0x1d0/0x1d0 [ 476.290068][ T3059] ? get_device_parent+0x10a/0x4e0 [ 476.295378][ T3059] ? class_dir_child_ns_type+0xd/0x60 [ 476.301048][ T3059] kobject_add_internal+0x2c8/0x960 [ 476.306269][ T3059] kobject_add+0x16f/0x240 [ 476.310723][ T3059] ? kset_create_and_add+0x190/0x190 [ 476.316029][ T3059] ? do_raw_spin_unlock+0x173/0x230 [ 476.321345][ T3059] ? kobject_put+0xbe/0x440 [ 476.325871][ T3059] device_add+0x290/0x1ac0 [ 476.330303][ T3059] ? reacquire_held_locks+0x4b0/0x4b0 [ 476.336033][ T3059] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 476.342903][ T3059] ? lockdep_init_map_type+0x16d/0x7c0 [ 476.348825][ T3059] nfc_register_device+0x41/0x3c0 [ 476.353884][ T3059] nci_register_device+0x7f4/0xb80 [ 476.359176][ T3059] ? nci_init_complete_req+0x410/0x410 [ 476.364907][ T3059] ? lockdep_init_map_type+0x16d/0x7c0 [ 476.370394][ T3059] virtual_ncidev_open+0x147/0x220 [ 476.375543][ T3059] ? virtual_ncidev_read+0x4e0/0x4e0 [ 476.381126][ T3059] misc_open+0x3da/0x4c0 [ 476.385378][ T3059] ? misc_devnode+0x120/0x120 [ 476.390058][ T3059] chrdev_open+0x277/0x700 [ 476.394583][ T3059] ? __unregister_chrdev+0x100/0x100 [ 476.399898][ T3059] ? fsnotify_perm.part.0+0x25d/0x630 [ 476.405304][ T3059] ? fsnotify_perm.part.0+0x268/0x630 [ 476.410703][ T3059] do_dentry_open+0x88b/0x1730 [ 476.415493][ T3059] ? __unregister_chrdev+0x100/0x100 [ 476.420797][ T3059] ? may_open+0x1f2/0x400 [ 476.425142][ T3059] path_openat+0x19af/0x29c0 [ 476.429742][ T3059] ? path_lookupat+0x770/0x770 [ 476.434531][ T3059] do_filp_open+0x1de/0x430 [ 476.439042][ T3059] ? may_open_dev+0xf0/0xf0 [ 476.443554][ T3059] ? expand_files+0x442/0x910 [ 476.448333][ T3059] ? _raw_spin_unlock+0x28/0x40 [ 476.453193][ T3059] ? alloc_fd+0x2da/0x6c0 [ 476.457527][ T3059] do_sys_openat2+0x176/0x1e0 [ 476.462207][ T3059] ? build_open_flags+0x690/0x690 [ 476.467265][ T3059] __x64_sys_openat+0x175/0x210 [ 476.472328][ T3059] ? __ia32_sys_open+0x1e0/0x1e0 [ 476.477293][ T3059] ? ksys_write+0x1a7/0x250 [ 476.481818][ T3059] ? rcu_is_watching+0x12/0xb0 [ 476.486941][ T3059] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 476.492932][ T3059] do_syscall_64+0x38/0xb0 [ 476.497366][ T3059] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 476.503277][ T3059] RIP: 0033:0x7fafba27cae9 [ 476.507696][ T3059] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 476.527310][ T3059] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 476.535732][ T3059] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 476.543711][ T3059] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 476.551689][ T3059] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 476.559668][ T3059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:46:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) (async, rerun: 32) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) 09:46:58 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44840}, 0x8000) 09:46:58 executing program 5: syz_open_dev$hidraw(&(0x7f0000000440), 0xf81, 0x400180) r0 = syz_open_dev$vcsu(&(0x7f0000000500), 0x5, 0x10000) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000220008002700000000dbdf250a14102be800000004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x28514be957777a6}, 0x40) syz_open_dev$vcsu(&(0x7f0000000700), 0x9, 0x4000) (async) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000480)) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000640)={0x2, 0x0, 0x10000}) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000004c0)={0x1, 0x200, 0x1}) (async, rerun: 32) openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x109000, 0x0) (rerun: 32) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000680)={0x3, 0x1, 0x7d9}) (async) ioctl$TIOCMBIS(r1, 0x5416, 0x0) (async) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000400)={0x77, 0x11, &(0x7f0000000000)="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"}) [ 476.567730][ T3059] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 476.575719][ T3059] [ 476.598087][ T3059] kobject: kobject_add_internal failed for nfc2 (error: -12 parent: nfc) 09:46:58 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 43) 09:46:58 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) (async) ioctl$TIOCMBIS(r1, 0x5416, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000180)={0x0, r1}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000180)={0x0, r1}, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x74b100, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) (async) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) 09:46:58 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x1f581c80, &(0x7f0000000e00)) 09:46:58 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44840}, 0x8000) 09:46:58 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000180)={0x0, r1}, 0x0) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x74b100, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) 09:46:58 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44840}, 0x8000) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44840}, 0x8000) (async) 09:46:58 executing program 5: syz_open_dev$hidraw(&(0x7f0000000440), 0xf81, 0x400180) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000500), 0x5, 0x10000) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000220008002700000000dbdf250a14102be800000004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x28514be957777a6}, 0x40) (async) syz_open_dev$vcsu(&(0x7f0000000700), 0x9, 0x4000) (async) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000480)) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000640)={0x2, 0x0, 0x10000}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000004c0)={0x1, 0x200, 0x1}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x109000, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000680)={0x3, 0x1, 0x7d9}) (async) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000400)={0x77, 0x11, &(0x7f0000000000)="9db952626688677842ef6e5dad56f9ca1a1153f9d4a3b585415430fbd2a7af44f43cefbf517ff41f46472b0006c91483047aabc40ada6d4fcf370ce5dfac1f530508c1991242e5a7ff65189c8116dd1c2801b1f25af2e5891ac4f21f207c95c447dafbffd7d8693de10d6c856a42520386507b279fda853f1b3311d079a6e5903f2648648887cfafefb7ecab15bc95a8f9fc4a95376dd08b1a495172e0a87a66aaa112823da860af2ef1ed2a8ba587cd12b7a61675cd062445391eab141e20710435aa4771e797fa55901db8a385edcb542331b4ea20f7b28ecdb5c3c8d3af6f1459e5660549cbca91ddaab77e505dddee34eb670c6eeaa680aca40a3b2f0262d88b30cf1b4e7296353df22295d02094899e208a6b3e9988a2e6319dc8d9aacdbc8f5171ebc00f3c7abac600b514374d5beed568fbb6c210fbef3434f8c798e901c1adc4d2d174197f45bf42b4ab79dcfdc7aba4a22d1f87f5a026beeff006e2aa101c9ee06b6561c4026e6add5d80bef856057f0ffb820769dd0051326639455af13b2d9885cc2693e7098d1f64f9733b53342d8050a02ad3b4fc9dad7ce08578a4155346fe3eeb9fa941e98fb4b1bf0e913fe9d172e6e6a4851fa6c25d1746661af3b80e3bad50fa8fe8fb17e4151f3cc983ee4da6d52a66a87cb943694ad4486ef69dfc4585930b7b7ef444bf30401c0f1de01b82f655f1f28f5c565318eea06c7a94fcf5d8e93fa4e119234665cbdab049e0535af91937809b80904ac2a9c068416fcc930bf0bbbbcb3e20d82e526a2a57bbb921b372739051aa598e8cf519a1cdeb82c45efb4d595ecd74fa94125d1053fd2de86ec080770b82dd740217955029112d0aa5627764fdd414e9ba21f3fd09f04196f1a6b5f4fd40128ca174fae71557fe041ac84e94dd071b46ea3dc005b5450705d49c5d9fcde8393fb7fe7bfded476f66f79f90ec507db48a9809862a9670452c8759b092c961662579f99a0a9016c23aafc8f4100a89e915609d97e2429392937bc8830b6062a2fc745445842d0c761d55c5e153539176d81143d092042d0bccd19fdd5cee5f9cbf25dbe22f915a897c312447df1d1b02dd212ba64683ef6102191d225d4ff63744b7690085f8bac7ea554faa54383e067d1616ccf11c2b8fc34599bd717f9411d04742ab4f905c0585eb454f1d48cffab76c7b290508d9596c6bdea8f26399fc775c6c9e8de06e4c9f7ea3fd739aa053fd088bb6b5da944fc6924848a801c5aebeb677b0456ef5b151d36c617cf5b2554adafd63cf50100dc11515b883c9d6ceb330ebff6dca88167c1f54e11de18194b21bb5c527a18f748feded40b7aa406dba6d4319a2c977dcab8d4c5b1efda6bfe6e3724fa089a011454219a5f4623cf0225abb8fd20fda195eb90eb08d9880c79b70b0a87ab1ae5c16482979ddf0000e565e8a"}) 09:46:58 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x20581c40, &(0x7f0000000e00)) [ 476.917665][ T3102] FAULT_INJECTION: forcing a failure. [ 476.917665][ T3102] name failslab, interval 1, probability 0, space 0, times 0 [ 476.955834][ T3102] CPU: 0 PID: 3102 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 476.966050][ T3102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 476.976220][ T3102] Call Trace: [ 476.979521][ T3102] [ 476.982479][ T3102] dump_stack_lvl+0x125/0x1b0 [ 476.987464][ T3102] should_fail_ex+0x496/0x5b0 [ 476.992195][ T3102] ? kstrdup_const+0x5f/0x70 [ 476.996861][ T3102] ? kstrdup_const+0x5f/0x70 [ 477.001729][ T3102] should_failslab+0x9/0x20 [ 477.006451][ T3102] __kmem_cache_alloc_node+0x5f/0x470 [ 477.011861][ T3102] ? kstrdup_const+0x5f/0x70 09:46:58 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0xb, 0x80000, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) r1 = accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) accept4$phonet_pipe(r1, 0x0, &(0x7f00000000c0), 0x800) [ 477.016489][ T3102] __kmalloc_node_track_caller+0x50/0x100 [ 477.022267][ T3102] kstrdup+0x3c/0x70 [ 477.026204][ T3102] kstrdup_const+0x5f/0x70 [ 477.030673][ T3102] __kernfs_new_node+0x9c/0x8a0 [ 477.035749][ T3102] ? kernfs_path_from_node+0x60/0x60 [ 477.041076][ T3102] ? stack_trace_save+0x96/0xd0 [ 477.045974][ T3102] ? rcu_is_watching+0x12/0xb0 [ 477.050776][ T3102] ? lock_acquire+0x464/0x510 [ 477.055508][ T3102] ? lock_sync+0x190/0x190 [ 477.059961][ T3102] kernfs_create_dir_ns+0x9a/0x210 [ 477.065116][ T3102] sysfs_create_dir_ns+0x13b/0x2a0 [ 477.070272][ T3102] ? sysfs_create_mount_point+0xb0/0xb0 [ 477.075860][ T3102] ? spin_bug+0x1d0/0x1d0 [ 477.080243][ T3102] ? get_device_parent+0x10a/0x4e0 [ 477.085402][ T3102] ? class_dir_child_ns_type+0xd/0x60 [ 477.090823][ T3102] kobject_add_internal+0x2c8/0x960 [ 477.096143][ T3102] kobject_add+0x16f/0x240 [ 477.100591][ T3102] ? kset_create_and_add+0x190/0x190 [ 477.105927][ T3102] ? do_raw_spin_unlock+0x173/0x230 [ 477.111170][ T3102] ? kobject_put+0xbe/0x440 [ 477.115804][ T3102] device_add+0x290/0x1ac0 [ 477.120266][ T3102] ? reacquire_held_locks+0x4b0/0x4b0 [ 477.125685][ T3102] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 477.132591][ T3102] ? lockdep_init_map_type+0x16d/0x7c0 [ 477.138094][ T3102] nfc_register_device+0x41/0x3c0 [ 477.143162][ T3102] nci_register_device+0x7f4/0xb80 [ 477.148404][ T3102] ? nci_init_complete_req+0x410/0x410 [ 477.154074][ T3102] ? lockdep_init_map_type+0x16d/0x7c0 [ 477.159716][ T3102] virtual_ncidev_open+0x147/0x220 [ 477.165142][ T3102] ? virtual_ncidev_read+0x4e0/0x4e0 [ 477.170562][ T3102] misc_open+0x3da/0x4c0 [ 477.174857][ T3102] ? misc_devnode+0x120/0x120 [ 477.179763][ T3102] chrdev_open+0x277/0x700 [ 477.184304][ T3102] ? __unregister_chrdev+0x100/0x100 [ 477.189616][ T3102] ? fsnotify_perm.part.0+0x25d/0x630 [ 477.195049][ T3102] ? fsnotify_perm.part.0+0x268/0x630 [ 477.200478][ T3102] do_dentry_open+0x88b/0x1730 [ 477.205372][ T3102] ? __unregister_chrdev+0x100/0x100 [ 477.210692][ T3102] ? may_open+0x1f2/0x400 [ 477.215070][ T3102] path_openat+0x19af/0x29c0 [ 477.219694][ T3102] ? path_lookupat+0x770/0x770 [ 477.224503][ T3102] do_filp_open+0x1de/0x430 [ 477.229040][ T3102] ? may_open_dev+0xf0/0xf0 [ 477.233570][ T3102] ? expand_files+0x442/0x910 [ 477.238289][ T3102] ? _raw_spin_unlock+0x28/0x40 [ 477.243184][ T3102] ? alloc_fd+0x2da/0x6c0 [ 477.247548][ T3102] do_sys_openat2+0x176/0x1e0 [ 477.252340][ T3102] ? build_open_flags+0x690/0x690 [ 477.255890][ T27] audit: type=1400 audit(1693734419.050:153): avc: denied { create } for pid=3129 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 477.257392][ T3102] __x64_sys_openat+0x175/0x210 [ 477.257431][ T3102] ? __ia32_sys_open+0x1e0/0x1e0 [ 477.288422][ T3102] ? ksys_write+0x1a7/0x250 [ 477.292976][ T3102] ? rcu_is_watching+0x12/0xb0 [ 477.297785][ T3102] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 477.303796][ T3102] do_syscall_64+0x38/0xb0 [ 477.308512][ T3102] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 477.314627][ T3102] RIP: 0033:0x7fafba27cae9 [ 477.319249][ T3102] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 477.340892][ T3102] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 477.349510][ T3102] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 477.357482][ T3102] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 477.365450][ T3102] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 477.373416][ T3102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.381560][ T3102] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 477.389669][ T3102] [ 477.408926][ T3102] kobject: kobject_add_internal failed for nfc7 (error: -12 parent: nfc) 09:46:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) (async) ioctl$TIOCMBIS(r0, 0x5416, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)) 09:46:59 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) socketpair(0x2a, 0x80000, 0x101, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x4, 0xa, 0x301, 0x0, 0x0, {0x8, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1ff}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1e1c2119ebf016ff}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000084) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r3) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r4, 0x5416, 0x0) sendto$isdn(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000e171ac4f028390b3ff22c402cbc0b342eeb3e66393f2bce302000000b816c6d7907897e6efe9c83a88a0d13008d1b09c73e17a5326bcdff2cfc60ddf2e2bebf7bce39ce5c68ad33bb742b33aaf0297597ae712197d73da3a68600cc5ce979247577f984810611390db5af60761973717eb4ca2a3d9bee5810000009c25abca19aa9e5a3d17f7eef714cbc256ff43e8994d48ccf5ee309dd493020048a676c70960b717a753ff0000003ff5013951d2bfb26e18aa3d80cd4e30387a1089de9f2af232d1d9553cb08b7e86c9374e2b4d9f92411ce2c3243b94571d24d2", @ANYRESDEC=r4, @ANYRES8=r3, @ANYRESOCT=r4], 0x36, 0x4000, &(0x7f0000000080)={0x22, 0x2, 0x5, 0x9, 0xea}, 0x6) 09:46:59 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x6c4, "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"}) 09:46:59 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0xb, 0x80000, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) r1 = accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) accept4$phonet_pipe(r1, 0x0, &(0x7f00000000c0), 0x800) 09:46:59 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 44) 09:46:59 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x21540000, &(0x7f0000000e00)) 09:46:59 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socketpair(0xb, 0x80000, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) r1 = accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) accept4$phonet_pipe(r1, 0x0, &(0x7f00000000c0), 0x800) 09:46:59 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) socketpair(0x2a, 0x80000, 0x101, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x4, 0xa, 0x301, 0x0, 0x0, {0x8, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1ff}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1e1c2119ebf016ff}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000084) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r3) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r4, 0x5416, 0x0) sendto$isdn(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000e171ac4f028390b3ff22c402cbc0b342eeb3e66393f2bce302000000b816c6d7907897e6efe9c83a88a0d13008d1b09c73e17a5326bcdff2cfc60ddf2e2bebf7bce39ce5c68ad33bb742b33aaf0297597ae712197d73da3a68600cc5ce979247577f984810611390db5af60761973717eb4ca2a3d9bee5810000009c25abca19aa9e5a3d17f7eef714cbc256ff43e8994d48ccf5ee309dd493020048a676c70960b717a753ff0000003ff5013951d2bfb26e18aa3d80cd4e30387a1089de9f2af232d1d9553cb08b7e86c9374e2b4d9f92411ce2c3243b94571d24d2", @ANYRESDEC=r4, @ANYRES8=r3, @ANYRESOCT=r4], 0x36, 0x4000, &(0x7f0000000080)={0x22, 0x2, 0x5, 0x9, 0xea}, 0x6) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) (async) socketpair(0x2a, 0x80000, 0x101, &(0x7f0000000000)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x4, 0xa, 0x301, 0x0, 0x0, {0x8, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1ff}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1e1c2119ebf016ff}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000084) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r3) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCMBIS(r4, 0x5416, 0x0) (async) sendto$isdn(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000e171ac4f028390b3ff22c402cbc0b342eeb3e66393f2bce302000000b816c6d7907897e6efe9c83a88a0d13008d1b09c73e17a5326bcdff2cfc60ddf2e2bebf7bce39ce5c68ad33bb742b33aaf0297597ae712197d73da3a68600cc5ce979247577f984810611390db5af60761973717eb4ca2a3d9bee5810000009c25abca19aa9e5a3d17f7eef714cbc256ff43e8994d48ccf5ee309dd493020048a676c70960b717a753ff0000003ff5013951d2bfb26e18aa3d80cd4e30387a1089de9f2af232d1d9553cb08b7e86c9374e2b4d9f92411ce2c3243b94571d24d2", @ANYRESDEC=r4, @ANYRES8=r3, @ANYRESOCT=r4], 0x36, 0x4000, &(0x7f0000000080)={0x22, 0x2, 0x5, 0x9, 0xea}, 0x6) (async) 09:46:59 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x6c4, "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"}) [ 477.904427][ T3227] FAULT_INJECTION: forcing a failure. [ 477.904427][ T3227] name failslab, interval 1, probability 0, space 0, times 0 [ 477.955640][ T3227] CPU: 1 PID: 3227 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 477.965686][ T3227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 477.975846][ T3227] Call Trace: [ 477.979125][ T3227] [ 477.982052][ T3227] dump_stack_lvl+0x125/0x1b0 [ 477.986873][ T3227] should_fail_ex+0x496/0x5b0 [ 477.991652][ T3227] ? kstrdup_const+0x5f/0x70 [ 477.996247][ T3227] ? kstrdup_const+0x5f/0x70 [ 478.000837][ T3227] should_failslab+0x9/0x20 [ 478.005348][ T3227] __kmem_cache_alloc_node+0x5f/0x470 [ 478.010730][ T3227] ? kstrdup_const+0x5f/0x70 [ 478.015323][ T3227] __kmalloc_node_track_caller+0x50/0x100 [ 478.021052][ T3227] kstrdup+0x3c/0x70 [ 478.024952][ T3227] kstrdup_const+0x5f/0x70 [ 478.029373][ T3227] __kernfs_new_node+0x9c/0x8a0 [ 478.034229][ T3227] ? kernfs_path_from_node+0x60/0x60 [ 478.039548][ T3227] ? stack_trace_save+0x96/0xd0 [ 478.045554][ T3227] ? rcu_is_watching+0x12/0xb0 [ 478.050316][ T3227] ? lock_acquire+0x464/0x510 [ 478.055002][ T3227] ? lock_sync+0x190/0x190 [ 478.059427][ T3227] kernfs_create_dir_ns+0x9a/0x210 [ 478.064547][ T3227] sysfs_create_dir_ns+0x13b/0x2a0 [ 478.069762][ T3227] ? sysfs_create_mount_point+0xb0/0xb0 [ 478.075314][ T3227] ? spin_bug+0x1d0/0x1d0 [ 478.079744][ T3227] ? get_device_parent+0x10a/0x4e0 [ 478.084953][ T3227] ? class_dir_child_ns_type+0xd/0x60 [ 478.090352][ T3227] kobject_add_internal+0x2c8/0x960 [ 478.095552][ T3227] kobject_add+0x16f/0x240 [ 478.099971][ T3227] ? kset_create_and_add+0x190/0x190 [ 478.105256][ T3227] ? do_raw_spin_unlock+0x173/0x230 [ 478.110491][ T3227] ? kobject_put+0xbe/0x440 [ 478.115031][ T3227] device_add+0x290/0x1ac0 [ 478.119574][ T3227] ? reacquire_held_locks+0x4b0/0x4b0 [ 478.124970][ T3227] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 478.131842][ T3227] ? lockdep_init_map_type+0x16d/0x7c0 [ 478.137398][ T3227] nfc_register_device+0x41/0x3c0 [ 478.143129][ T3227] nci_register_device+0x7f4/0xb80 [ 478.148254][ T3227] ? nci_init_complete_req+0x410/0x410 [ 478.153720][ T3227] ? lockdep_init_map_type+0x16d/0x7c0 [ 478.159188][ T3227] virtual_ncidev_open+0x147/0x220 [ 478.164564][ T3227] ? virtual_ncidev_read+0x4e0/0x4e0 [ 478.169872][ T3227] misc_open+0x3da/0x4c0 [ 478.174125][ T3227] ? misc_devnode+0x120/0x120 [ 478.179070][ T3227] chrdev_open+0x277/0x700 [ 478.183767][ T3227] ? __unregister_chrdev+0x100/0x100 [ 478.189168][ T3227] ? fsnotify_perm.part.0+0x25d/0x630 [ 478.194558][ T3227] ? fsnotify_perm.part.0+0x268/0x630 [ 478.199981][ T3227] do_dentry_open+0x88b/0x1730 [ 478.204759][ T3227] ? __unregister_chrdev+0x100/0x100 [ 478.210060][ T3227] ? may_open+0x1f2/0x400 [ 478.214413][ T3227] path_openat+0x19af/0x29c0 [ 478.219022][ T3227] ? path_lookupat+0x770/0x770 [ 478.223807][ T3227] do_filp_open+0x1de/0x430 [ 478.228319][ T3227] ? may_open_dev+0xf0/0xf0 [ 478.232826][ T3227] ? expand_files+0x442/0x910 [ 478.237511][ T3227] ? _raw_spin_unlock+0x28/0x40 [ 478.242383][ T3227] ? alloc_fd+0x2da/0x6c0 [ 478.246745][ T3227] do_sys_openat2+0x176/0x1e0 [ 478.251467][ T3227] ? build_open_flags+0x690/0x690 [ 478.256512][ T3227] __x64_sys_openat+0x175/0x210 [ 478.261371][ T3227] ? __ia32_sys_open+0x1e0/0x1e0 [ 478.266311][ T3227] ? ksys_write+0x1a7/0x250 [ 478.270821][ T3227] ? rcu_is_watching+0x12/0xb0 [ 478.275770][ T3227] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 478.281844][ T3227] do_syscall_64+0x38/0xb0 [ 478.286290][ T3227] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 478.292401][ T3227] RIP: 0033:0x7fafba27cae9 [ 478.296826][ T3227] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 478.316962][ T3227] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 478.325386][ T3227] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 478.333447][ T3227] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 478.341527][ T3227] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 478.349495][ T3227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:47:00 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x6c4, "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"}) [ 478.357466][ T3227] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 478.365445][ T3227] 09:47:00 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x100006, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r2 = syz_open_pts(r1, 0x0) read$hidraw(r2, 0x0, 0xffffffc3) [ 478.405930][ T3227] kobject: kobject_add_internal failed for nfc2 (error: -12 parent: nfc) 09:47:00 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) 09:47:00 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x1, 0x100, 0x5, 0x4000}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0x3, 0x20004, 0x5, 0xffffffff, 0x3f, "a2b19b2349376d3f4bd90fcbf3bb003bab2f29", 0x80000001, 0x7}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:47:00 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) (async) socketpair(0x2a, 0x80000, 0x101, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x4, 0xa, 0x301, 0x0, 0x0, {0x8, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1ff}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1e1c2119ebf016ff}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000084) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r3) (rerun: 64) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r4, 0x5416, 0x0) (async) sendto$isdn(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000e171ac4f028390b3ff22c402cbc0b342eeb3e66393f2bce302000000b816c6d7907897e6efe9c83a88a0d13008d1b09c73e17a5326bcdff2cfc60ddf2e2bebf7bce39ce5c68ad33bb742b33aaf0297597ae712197d73da3a68600cc5ce979247577f984810611390db5af60761973717eb4ca2a3d9bee5810000009c25abca19aa9e5a3d17f7eef714cbc256ff43e8994d48ccf5ee309dd493020048a676c70960b717a753ff0000003ff5013951d2bfb26e18aa3d80cd4e30387a1089de9f2af232d1d9553cb08b7e86c9374e2b4d9f92411ce2c3243b94571d24d2", @ANYRESDEC=r4, @ANYRES8=r3, @ANYRESOCT=r4], 0x36, 0x4000, &(0x7f0000000080)={0x22, 0x2, 0x5, 0x9, 0xea}, 0x6) 09:47:00 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 45) 09:47:00 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) 09:47:00 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x100006, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r2 = syz_open_pts(r1, 0x0) read$hidraw(r2, 0x0, 0xffffffc3) 09:47:00 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x33890000, &(0x7f0000000e00)) 09:47:00 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) 09:47:00 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 46) 09:47:00 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x100006, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r2 = syz_open_pts(r1, 0x0) read$hidraw(r2, 0x0, 0xffffffc3) 09:47:00 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000040)) 09:47:00 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x1, 0x100, 0x5, 0x4000}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0x3, 0x20004, 0x5, 0xffffffff, 0x3f, "a2b19b2349376d3f4bd90fcbf3bb003bab2f29", 0x80000001, 0x7}) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) [ 478.823077][ T3293] FAULT_INJECTION: forcing a failure. [ 478.823077][ T3293] name failslab, interval 1, probability 0, space 0, times 0 [ 478.835957][ T3293] CPU: 0 PID: 3293 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 478.845967][ T3293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 478.856136][ T3293] Call Trace: [ 478.859419][ T3293] [ 478.862351][ T3293] dump_stack_lvl+0x125/0x1b0 [ 478.867050][ T3293] should_fail_ex+0x496/0x5b0 [ 478.871788][ T3293] should_failslab+0x9/0x20 [ 478.876302][ T3293] kmem_cache_alloc+0x61/0x400 [ 478.881089][ T3293] __kernfs_new_node+0xd3/0x8a0 [ 478.885944][ T3293] ? kernfs_add_one+0x17f/0x510 [ 478.890804][ T3293] ? kernfs_path_from_node+0x60/0x60 [ 478.896103][ T3293] ? rcu_is_watching+0x12/0xb0 [ 478.900890][ T3293] ? rcu_is_watching+0x12/0xb0 [ 478.905866][ T3293] ? lock_release+0x4bf/0x680 [ 478.910556][ T3293] ? sysfs_do_create_link_sd+0x82/0x140 [ 478.916376][ T3293] kernfs_new_node+0x94/0x110 [ 478.921064][ T3293] kernfs_create_link+0xcc/0x230 [ 478.926009][ T3293] sysfs_do_create_link_sd+0x90/0x140 [ 478.931392][ T3293] sysfs_create_link+0x61/0xc0 [ 478.936164][ T3293] device_add+0x546/0x1ac0 [ 478.940594][ T3293] ? reacquire_held_locks+0x4b0/0x4b0 [ 478.945983][ T3293] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 478.952845][ T3293] ? lockdep_init_map_type+0x16d/0x7c0 [ 478.958313][ T3293] nfc_register_device+0x41/0x3c0 [ 478.963357][ T3293] nci_register_device+0x7f4/0xb80 [ 478.968478][ T3293] ? nci_init_complete_req+0x410/0x410 [ 478.973942][ T3293] ? lockdep_init_map_type+0x16d/0x7c0 [ 478.979412][ T3293] virtual_ncidev_open+0x147/0x220 [ 478.984536][ T3293] ? virtual_ncidev_read+0x4e0/0x4e0 [ 478.989835][ T3293] misc_open+0x3da/0x4c0 [ 478.994102][ T3293] ? misc_devnode+0x120/0x120 [ 478.998783][ T3293] chrdev_open+0x277/0x700 [ 479.003202][ T3293] ? __unregister_chrdev+0x100/0x100 [ 479.008490][ T3293] ? fsnotify_perm.part.0+0x25d/0x630 [ 479.013880][ T3293] ? fsnotify_perm.part.0+0x268/0x630 [ 479.019281][ T3293] do_dentry_open+0x88b/0x1730 [ 479.024054][ T3293] ? __unregister_chrdev+0x100/0x100 [ 479.029339][ T3293] ? may_open+0x1f2/0x400 [ 479.033677][ T3293] path_openat+0x19af/0x29c0 [ 479.038266][ T3293] ? path_lookupat+0x770/0x770 [ 479.043390][ T3293] do_filp_open+0x1de/0x430 [ 479.047895][ T3293] ? may_open_dev+0xf0/0xf0 [ 479.052397][ T3293] ? expand_files+0x442/0x910 [ 479.057083][ T3293] ? _raw_spin_unlock+0x28/0x40 [ 479.061942][ T3293] ? alloc_fd+0x2da/0x6c0 [ 479.066279][ T3293] do_sys_openat2+0x176/0x1e0 [ 479.071057][ T3293] ? build_open_flags+0x690/0x690 [ 479.076188][ T3293] __x64_sys_openat+0x175/0x210 [ 479.081058][ T3293] ? __ia32_sys_open+0x1e0/0x1e0 [ 479.086086][ T3293] ? ksys_write+0x1a7/0x250 [ 479.090599][ T3293] ? rcu_is_watching+0x12/0xb0 [ 479.095382][ T3293] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 479.101375][ T3293] do_syscall_64+0x38/0xb0 [ 479.105830][ T3293] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 479.111733][ T3293] RIP: 0033:0x7fafba27cae9 [ 479.116148][ T3293] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 479.135842][ T3293] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 479.144253][ T3293] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 479.152308][ T3293] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 479.160277][ T3293] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 09:47:01 executing program 3: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1) read$hidraw(0xffffffffffffffff, 0x0, 0x0) [ 479.168265][ T3293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 479.176232][ T3293] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 479.184208][ T3293] 09:47:01 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x1, 0x100, 0x5, 0x4000}) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x1, 0x100, 0x5, 0x4000}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0x3, 0x20004, 0x5, 0xffffffff, 0x3f, "a2b19b2349376d3f4bd90fcbf3bb003bab2f29", 0x80000001, 0x7}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:47:01 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x369418c0, &(0x7f0000000e00)) 09:47:01 executing program 3: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:47:01 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 47) 09:47:01 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) (async) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000040)) 09:47:01 executing program 4: ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xab, 0x301200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000001a00010025bd7000fbdbdf251c2010c0fd03000a80100000140012002600d040568e006d6897bb8050f239c405001a0001000000140012001e009912a39b3d54d96cc0d079d02583080001000000000008000400", @ANYRES32=r1, @ANYBLOB="08000100000a0200140012001500778ef038b9b61416b12dd9449a46"], 0x78}, 0x1, 0x0, 0x0, 0x4008054}, 0x4000014) 09:47:01 executing program 4: ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xab, 0x301200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000001a00010025bd7000fbdbdf251c2010c0fd03000a80100000140012002600d040568e006d6897bb8050f239c405001a0001000000140012001e009912a39b3d54d96cc0d079d02583080001000000000008000400", @ANYRES32=r1, @ANYBLOB="08000100000a0200140012001500778ef038b9b61416b12dd9449a46"], 0x78}, 0x1, 0x0, 0x0, 0x4008054}, 0x4000014) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) (async) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0xab, 0x301200) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000001a00010025bd7000fbdbdf251c2010c0fd03000a80100000140012002600d040568e006d6897bb8050f239c405001a0001000000140012001e009912a39b3d54d96cc0d079d02583080001000000000008000400", @ANYRES32=r1, @ANYBLOB="08000100000a0200140012001500778ef038b9b61416b12dd9449a46"], 0x78}, 0x1, 0x0, 0x0, 0x4008054}, 0x4000014) (async) 09:47:01 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000040)) 09:47:01 executing program 3: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1) (async) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:47:01 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x400448c9, &(0x7f0000000e00)) 09:47:01 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) [ 479.267593][ T3300] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 479.485284][ T3321] FAULT_INJECTION: forcing a failure. [ 479.485284][ T3321] name failslab, interval 1, probability 0, space 0, times 0 [ 479.549288][ T3321] CPU: 0 PID: 3321 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 479.559330][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 479.569418][ T3321] Call Trace: [ 479.572724][ T3321] [ 479.575668][ T3321] dump_stack_lvl+0x125/0x1b0 [ 479.580365][ T3321] should_fail_ex+0x496/0x5b0 [ 479.585061][ T3321] ? kstrdup_const+0x5f/0x70 [ 479.589658][ T3321] ? kstrdup_const+0x5f/0x70 [ 479.594252][ T3321] should_failslab+0x9/0x20 [ 479.598785][ T3321] __kmem_cache_alloc_node+0x5f/0x470 [ 479.604257][ T3321] ? rcu_is_watching+0x12/0xb0 [ 479.609313][ T3321] ? kstrdup_const+0x5f/0x70 [ 479.613997][ T3321] __kmalloc_node_track_caller+0x50/0x100 [ 479.619827][ T3321] kstrdup+0x3c/0x70 [ 479.623725][ T3321] kstrdup_const+0x5f/0x70 [ 479.628144][ T3321] __kernfs_new_node+0x9c/0x8a0 [ 479.633103][ T3321] ? kernfs_add_one+0x3ca/0x510 [ 479.637955][ T3321] ? kernfs_path_from_node+0x60/0x60 [ 479.643335][ T3321] ? down_write+0x14f/0x200 [ 479.647846][ T3321] ? rcu_is_watching+0x12/0xb0 [ 479.652697][ T3321] ? rcu_is_watching+0x12/0xb0 [ 479.657546][ T3321] ? lock_release+0x4bf/0x680 [ 479.662228][ T3321] ? sysfs_do_create_link_sd+0x82/0x140 [ 479.667785][ T3321] kernfs_new_node+0x94/0x110 [ 479.672469][ T3321] kernfs_create_link+0xcc/0x230 [ 479.677416][ T3321] sysfs_do_create_link_sd+0x90/0x140 [ 479.682886][ T3321] sysfs_create_link+0x61/0xc0 [ 479.687658][ T3321] device_add+0x669/0x1ac0 [ 479.692097][ T3321] ? reacquire_held_locks+0x4b0/0x4b0 [ 479.697482][ T3321] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 479.704359][ T3321] ? lockdep_init_map_type+0x16d/0x7c0 [ 479.709913][ T3321] nfc_register_device+0x41/0x3c0 [ 479.715207][ T3321] nci_register_device+0x7f4/0xb80 [ 479.720326][ T3321] ? nci_init_complete_req+0x410/0x410 [ 479.725813][ T3321] ? lockdep_init_map_type+0x16d/0x7c0 [ 479.731285][ T3321] virtual_ncidev_open+0x147/0x220 [ 479.736415][ T3321] ? virtual_ncidev_read+0x4e0/0x4e0 [ 479.742649][ T3321] misc_open+0x3da/0x4c0 [ 479.746983][ T3321] ? misc_devnode+0x120/0x120 [ 479.751661][ T3321] chrdev_open+0x277/0x700 [ 479.756081][ T3321] ? __unregister_chrdev+0x100/0x100 [ 479.761368][ T3321] ? fsnotify_perm.part.0+0x25d/0x630 [ 479.766771][ T3321] ? fsnotify_perm.part.0+0x268/0x630 [ 479.772168][ T3321] do_dentry_open+0x88b/0x1730 [ 479.776933][ T3321] ? __unregister_chrdev+0x100/0x100 [ 479.782217][ T3321] ? may_open+0x1f2/0x400 [ 479.786554][ T3321] path_openat+0x19af/0x29c0 [ 479.791144][ T3321] ? path_lookupat+0x770/0x770 [ 479.795921][ T3321] do_filp_open+0x1de/0x430 [ 479.800425][ T3321] ? may_open_dev+0xf0/0xf0 [ 479.804925][ T3321] ? expand_files+0x442/0x910 [ 479.809612][ T3321] ? _raw_spin_unlock+0x28/0x40 [ 479.814468][ T3321] ? alloc_fd+0x2da/0x6c0 [ 479.818805][ T3321] do_sys_openat2+0x176/0x1e0 [ 479.823486][ T3321] ? build_open_flags+0x690/0x690 [ 479.828524][ T3321] __x64_sys_openat+0x175/0x210 [ 479.833380][ T3321] ? __ia32_sys_open+0x1e0/0x1e0 [ 479.838319][ T3321] ? ksys_write+0x1a7/0x250 [ 479.842825][ T3321] ? rcu_is_watching+0x12/0xb0 [ 479.847592][ T3321] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 479.853580][ T3321] do_syscall_64+0x38/0xb0 [ 479.858013][ T3321] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 479.863918][ T3321] RIP: 0033:0x7fafba27cae9 [ 479.868330][ T3321] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 479.887941][ T3321] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 479.896354][ T3321] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 479.904328][ T3321] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 479.912299][ T3321] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 479.920530][ T3321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 479.928504][ T3321] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 479.936482][ T3321] 09:47:01 executing program 4: ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xab, 0x301200) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000001a00010025bd7000fbdbdf251c2010c0fd03000a80100000140012002600d040568e006d6897bb8050f239c405001a0001000000140012001e009912a39b3d54d96cc0d079d02583080001000000000008000400", @ANYRES32=r1, @ANYBLOB="08000100000a0200140012001500778ef038b9b61416b12dd9449a46"], 0x78}, 0x1, 0x0, 0x0, 0x4008054}, 0x4000014) 09:47:01 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) 09:47:01 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000003c0), 0x4) syz_open_dev$hidraw(&(0x7f0000000000), 0xf845, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) 09:47:01 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x40012041) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000003400)=0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) recvmsg$can_j1939(r0, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000000000)=""/176, 0xb0}, {&(0x7f00000000c0)=""/94, 0x5e}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/100, 0x64}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/239, 0xef}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/124, 0x7c}], 0x8}, 0x2) 09:47:01 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 48) 09:47:01 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000003c0), 0x4) syz_open_dev$hidraw(&(0x7f0000000000), 0xf845, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000000), 0xf845, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) 09:47:01 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) 09:47:02 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x40012041) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000003400)=0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async) ioctl$TIOCCBRK(r0, 0x5428) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) (async) recvmsg$can_j1939(r0, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000000000)=""/176, 0xb0}, {&(0x7f00000000c0)=""/94, 0x5e}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/100, 0x64}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/239, 0xef}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/124, 0x7c}], 0x8}, 0x2) 09:47:02 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x400448dd, &(0x7f0000000e00)) 09:47:02 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) 09:47:02 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000003c0), 0x4) syz_open_dev$hidraw(&(0x7f0000000000), 0xf845, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) bpf$LINK_DETACH(0x22, &(0x7f00000003c0), 0x4) (async) syz_open_dev$hidraw(&(0x7f0000000000), 0xf845, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) [ 480.298623][ T3373] FAULT_INJECTION: forcing a failure. [ 480.298623][ T3373] name failslab, interval 1, probability 0, space 0, times 0 [ 480.354934][ T3373] CPU: 0 PID: 3373 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 480.364969][ T3373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 480.375049][ T3373] Call Trace: [ 480.378348][ T3373] [ 480.381296][ T3373] dump_stack_lvl+0x125/0x1b0 [ 480.386015][ T3373] should_fail_ex+0x496/0x5b0 [ 480.390735][ T3373] should_failslab+0x9/0x20 [ 480.395270][ T3373] kmem_cache_alloc+0x61/0x400 [ 480.400069][ T3373] __kernfs_new_node+0xd3/0x8a0 [ 480.404955][ T3373] ? lock_sync+0x190/0x190 [ 480.409412][ T3373] ? kernfs_path_from_node+0x60/0x60 [ 480.414732][ T3373] ? rcu_is_watching+0x12/0xb0 [ 480.419526][ T3373] ? lock_acquire+0x464/0x510 [ 480.424244][ T3373] ? down_write+0x14f/0x200 [ 480.428777][ T3373] ? lock_sync+0x190/0x190 [ 480.433229][ T3373] ? down_write+0x14f/0x200 [ 480.437768][ T3373] kernfs_new_node+0x94/0x110 [ 480.442480][ T3373] __kernfs_create_file+0x53/0x340 [ 480.447631][ T3373] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 480.453045][ T3373] sysfs_merge_group+0x1b1/0x330 [ 480.458014][ T3373] ? sysfs_update_groups+0x30/0x30 [ 480.463141][ T3373] ? panel_show+0xf0/0xf0 [ 480.467554][ T3373] ? bus_to_subsys+0x129/0x160 [ 480.472323][ T3373] dpm_sysfs_add+0x22f/0x280 [ 480.476959][ T3373] device_add+0x9e7/0x1ac0 [ 480.481387][ T3373] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 480.488267][ T3373] ? lockdep_init_map_type+0x16d/0x7c0 [ 480.493736][ T3373] nfc_register_device+0x41/0x3c0 [ 480.498773][ T3373] nci_register_device+0x7f4/0xb80 [ 480.503890][ T3373] ? nci_init_complete_req+0x410/0x410 [ 480.509351][ T3373] ? lockdep_init_map_type+0x16d/0x7c0 [ 480.514906][ T3373] virtual_ncidev_open+0x147/0x220 [ 480.520032][ T3373] ? virtual_ncidev_read+0x4e0/0x4e0 [ 480.525414][ T3373] misc_open+0x3da/0x4c0 [ 480.529666][ T3373] ? misc_devnode+0x120/0x120 [ 480.534348][ T3373] chrdev_open+0x277/0x700 [ 480.538767][ T3373] ? __unregister_chrdev+0x100/0x100 [ 480.544060][ T3373] ? fsnotify_perm.part.0+0x25d/0x630 [ 480.549443][ T3373] ? fsnotify_perm.part.0+0x268/0x630 [ 480.554823][ T3373] do_dentry_open+0x88b/0x1730 [ 480.559601][ T3373] ? __unregister_chrdev+0x100/0x100 [ 480.564982][ T3373] ? may_open+0x1f2/0x400 [ 480.569322][ T3373] path_openat+0x19af/0x29c0 [ 480.573914][ T3373] ? path_lookupat+0x770/0x770 [ 480.578695][ T3373] do_filp_open+0x1de/0x430 [ 480.583200][ T3373] ? may_open_dev+0xf0/0xf0 [ 480.587703][ T3373] ? expand_files+0x442/0x910 [ 480.592402][ T3373] ? _raw_spin_unlock+0x28/0x40 [ 480.597434][ T3373] ? alloc_fd+0x2da/0x6c0 [ 480.601963][ T3373] do_sys_openat2+0x176/0x1e0 [ 480.606646][ T3373] ? build_open_flags+0x690/0x690 [ 480.611774][ T3373] __x64_sys_openat+0x175/0x210 [ 480.616626][ T3373] ? __ia32_sys_open+0x1e0/0x1e0 [ 480.621740][ T3373] ? ksys_write+0x1a7/0x250 [ 480.626256][ T3373] ? rcu_is_watching+0x12/0xb0 [ 480.631196][ T3373] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 480.637186][ T3373] do_syscall_64+0x38/0xb0 [ 480.641614][ T3373] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 480.647532][ T3373] RIP: 0033:0x7fafba27cae9 [ 480.651946][ T3373] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 480.671560][ T3373] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 480.679993][ T3373] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 480.688170][ T3373] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 480.696177][ T3373] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 480.704235][ T3373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 480.712302][ T3373] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 480.720277][ T3373] 09:47:02 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) 09:47:02 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) 09:47:02 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) accept$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7) 09:47:02 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 49) 09:47:02 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x40012041) (async) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000003400)=0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) (async, rerun: 64) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async, rerun: 64) ioctl$TIOCCBRK(r0, 0x5428) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) (async, rerun: 32) recvmsg$can_j1939(r0, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000000000)=""/176, 0xb0}, {&(0x7f00000000c0)=""/94, 0x5e}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/100, 0x64}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/239, 0xef}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/124, 0x7c}], 0x8}, 0x2) (rerun: 32) 09:47:02 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) accept$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7) 09:47:02 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x400454ca, &(0x7f0000000e00)) [ 480.964253][ T3407] FAULT_INJECTION: forcing a failure. [ 480.964253][ T3407] name failslab, interval 1, probability 0, space 0, times 0 [ 481.000794][ T3407] CPU: 0 PID: 3407 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 481.010837][ T3407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 481.021006][ T3407] Call Trace: [ 481.024315][ T3407] [ 481.027266][ T3407] dump_stack_lvl+0x125/0x1b0 [ 481.031986][ T3407] should_fail_ex+0x496/0x5b0 [ 481.036714][ T3407] should_failslab+0x9/0x20 [ 481.041268][ T3407] kmem_cache_alloc+0x61/0x400 [ 481.046072][ T3407] ? lock_acquire+0x464/0x510 [ 481.050792][ T3407] __kernfs_new_node+0xd3/0x8a0 [ 481.055677][ T3407] ? kernfs_add_one+0x3ca/0x510 09:47:02 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) (async) accept$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7) [ 481.060575][ T3407] ? kernfs_path_from_node+0x60/0x60 [ 481.065898][ T3407] ? down_write+0x14f/0x200 [ 481.070436][ T3407] ? down_write+0x14f/0x200 [ 481.074973][ T3407] ? up_write+0x1b3/0x510 [ 481.079333][ T3407] kernfs_new_node+0x94/0x110 [ 481.084054][ T3407] __kernfs_create_file+0x53/0x340 [ 481.089203][ T3407] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 481.094617][ T3407] sysfs_merge_group+0x1b1/0x330 [ 481.099598][ T3407] ? sysfs_update_groups+0x30/0x30 [ 481.104848][ T3407] ? panel_show+0xf0/0xf0 [ 481.109215][ T3407] ? bus_to_subsys+0x129/0x160 [ 481.114094][ T3407] dpm_sysfs_add+0x22f/0x280 [ 481.118731][ T3407] device_add+0x9e7/0x1ac0 [ 481.123204][ T3407] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 481.130101][ T3407] ? lockdep_init_map_type+0x16d/0x7c0 [ 481.135603][ T3407] nfc_register_device+0x41/0x3c0 [ 481.140664][ T3407] nci_register_device+0x7f4/0xb80 [ 481.145793][ T3407] ? nci_init_complete_req+0x410/0x410 [ 481.151260][ T3407] ? lockdep_init_map_type+0x16d/0x7c0 [ 481.156732][ T3407] virtual_ncidev_open+0x147/0x220 [ 481.161859][ T3407] ? virtual_ncidev_read+0x4e0/0x4e0 [ 481.167172][ T3407] misc_open+0x3da/0x4c0 [ 481.171430][ T3407] ? misc_devnode+0x120/0x120 [ 481.176120][ T3407] chrdev_open+0x277/0x700 [ 481.180552][ T3407] ? __unregister_chrdev+0x100/0x100 [ 481.185850][ T3407] ? fsnotify_perm.part.0+0x25d/0x630 [ 481.191247][ T3407] ? fsnotify_perm.part.0+0x268/0x630 [ 481.196636][ T3407] do_dentry_open+0x88b/0x1730 [ 481.201399][ T3407] ? __unregister_chrdev+0x100/0x100 [ 481.206682][ T3407] ? may_open+0x1f2/0x400 [ 481.211019][ T3407] path_openat+0x19af/0x29c0 [ 481.215608][ T3407] ? path_lookupat+0x770/0x770 [ 481.220382][ T3407] do_filp_open+0x1de/0x430 [ 481.224884][ T3407] ? may_open_dev+0xf0/0xf0 [ 481.229387][ T3407] ? expand_files+0x442/0x910 [ 481.234072][ T3407] ? _raw_spin_unlock+0x28/0x40 [ 481.238929][ T3407] ? alloc_fd+0x2da/0x6c0 [ 481.243267][ T3407] do_sys_openat2+0x176/0x1e0 [ 481.248049][ T3407] ? build_open_flags+0x690/0x690 [ 481.253080][ T3407] __x64_sys_openat+0x175/0x210 [ 481.257936][ T3407] ? __ia32_sys_open+0x1e0/0x1e0 [ 481.262884][ T3407] ? ksys_write+0x1a7/0x250 [ 481.267392][ T3407] ? rcu_is_watching+0x12/0xb0 [ 481.272155][ T3407] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 481.278140][ T3407] do_syscall_64+0x38/0xb0 [ 481.282568][ T3407] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 481.288476][ T3407] RIP: 0033:0x7fafba27cae9 [ 481.292978][ T3407] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 481.312775][ T3407] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 481.321192][ T3407] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 481.329160][ T3407] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 481.337135][ T3407] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 481.345109][ T3407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 481.353081][ T3407] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 481.361146][ T3407] 09:47:03 executing program 5: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x99a9, 0x0}, 0x10011) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xfffffff7, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r1, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r0, 0x11) 09:47:03 executing program 5: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x99a9, 0x0}, 0x10011) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xfffffff7, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r1, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r0, 0x11) 09:47:03 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x4, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5a401c33}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000005}, 0x1) 09:47:03 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x0) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) (async) 09:47:03 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) 09:47:03 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 50) 09:47:03 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x40049409, &(0x7f0000000e00)) 09:47:03 executing program 5: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x99a9, 0x0}, 0x10011) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xfffffff7, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r1, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r0, 0x11) 09:47:03 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x4, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5a401c33}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000005}, 0x1) 09:47:03 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x5dafc9dd38ae9950, r0}, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000e40)="14a11219acec0d6632e10fab75bdd2ec60008b9661ebd4447a25068e5fabfeb6bd46c3291b567445e31bf53a1f51faa9655ba9524c5e6e7c14bc4c5d4c26d2a3573b0ac2dfc5d0b0c2c98998bcdfc775d14e8c306535a046f36847533d95fab1acce1050393686552df88b3e4ab93cc886f492cf719b64e5c4c4c3802e8dadb9b60f11d756ebdee3de9c5f01924f016a9244c6148cd22d6ae7b6b8e5b3274782d08a9e7d19bde652c71f42b82feb028a5cb292ab801cd0f590c73b6abf5af2c6bb60edbfbb2c7ffb48093d4e1c65761217c30fae335df1c0d04498372827edda95e5b6d524052608db1910ced7831efd999569f24bd4cb473a12aaab822b9b7c181dbc314545d0112d2d506cdf394362e05a9fee9e686ecf1b8df84538c4bc38d36dc16d1be6b17360726497850131eb7f65a18174b4ac4eef145254e0047db195119007407e8c69fb9f95c2482f9c723b38a8be8b1cf8b6188939e78e130aece4142bf6d87cdb3e0e273ced2e39a55646c148a7eaa4deb143d051555b5b1ada89f2baa2a1470d38f6082c9943d4b3e946126dc19428e58bb8d0a17b3e5c34cf185026a1c5d43532ed7106e3631cb9d18554c5c03ba0cd4ab53622e2ba484878841eea0fd782d460cbbb906d0e8da89c1dd195791e4799cf70439d4f49e878026485125c76608dd487f187c75460cb53f36589bd4bf191206d12abf9807bfee9be79a7630499ac98c9b76d3c679d7a216aa1b7edea961859df4728e89ed638b9d497f5c3e769638092f8002abb70a806cb605b5855d8e8bcb83c8fe87bd76b9d204bf8af167eea6604c2582fadf71b9d13b31fe71591d04ed0c810118d6c26b0134e5154ab98832b972735afa461006bed70ab8ce2adc1566314b59c992cef629c09eb64fe5eeac1cd380a71a655047f36334407010fc421f5436578bf16780a2550d44c8764d8a85442695e5a05d1051ea5818cd7661b299b34c444785ece659f95a4fef6c1f6fa4340746c9cf710cf6c17ee5caa3b6799258e3bbefabb475fab2fa9eb64fc2a786cd044309f4a530a472b9a9f2fa3cb758a40d73bee9ce29cde92e3a27a32445840afcbdbe483065b9b50252780d58e3c5f05222d965a643681586172196a9161631c96454e14e94f7ce3462820d92a34c42a2f2852a84b3dec81367f5e7ce0c4d5c80b676c99d404338a3e4383e2c52578af6ddb5b497333bbcfe4652ce5a3fd7c2034f04bd0cf070ab23cefbc1a689fb8906d6d736099d4d8aedec772942022c8c8ac3b9ecb186fc73e8a5f18aaacdad51f8ceb7624079990c63b85868d78c0c18b06ada75b88b443cd0e5f697f1bf1318d29f77265f1b61a499b5a08b2a42950d822f37d1eb41427e83c8fa3d47339cb9495cfc8b6d19ac127ba8fa3b8745ea152287f93aea58d7119f13e144a87e3480d4b828cd31a6b5b6ecd5f7364d6b8e691233a57a86d68f1a3521e43477df98e629286232dfb8b798660fcaa54355af7f07331bb3ff7820717d17fb9b23a02a4016ce02dc6164ed58e40bc89aeaeb1264cf283881efc3ea2753e8171ef9c4ed681c28ce36a83937ddbee42dd307a8fdde6ecd579d56bded472bccffb453f8245a509d2c7838aa39eff762459209afa97b8ba28de1b6764343407339f5b50d95e58b02713096838bbc0eea1de0310b19c2e4f3ae291c11a4cb0ae501656dc4988d29d931ace0c9b039422b9f8edaab318663ccd5972d0df26c5d57e07ca08083d0674bc206d80511d124c3aee8d964071d5053c25cc3607ce062ebb9f68da6aa106cae8950cb9cbdd456578a3edf2dc25b16ca5885ed93810dcfaa4c68e8e72edaad59c98250e0dfd96a248e03a42c03a03cf2e7d34fd68a368e20b3811ee5ae933ae6eec029ea3b2b103367be32aa6d2e9310b2b80d15e796f2e6f5f542338f1fd87e1206bbbdad08518b8b4b548ddfea25da70feac51ee3a3036e186b6cd995ff148230de0ced3636e4d6398da6a29fdcea57e7b0d30687e42896fd83555f25c6e00dd12a5853e66ab365af801f26a26abf1dc1e70e9cc3f9037183a42989600a0aaa8456c47cea3115db36ba545969bdc3e864e9d6164e3f84dfd3608c634386d4af2ef246a98d048d481228ecd1d1ea41128738dd488fa87265e59a686c60fec17b602c65c7ce098bb44918289cf6a8b472441ec1fc99eca5cff7bede24694fa9de0a7915f381ac3703576bb7de4b109d53ba4d3936f53925451d53730d54cfd297e54ecebe8f5df785c3ad6f8fac12b2421c928f0fbca3ef178103c673b41d6cbede45ec2ccc46cfa1d4360d09ca1538df898dd3ac7d22a35c0031afd63f902881d40b753fa4449fadc34dc664c90831cfc22860140408b59e88748f4ba40bbc181dfefea995c7a0b144ab347bac184a692bcd69fac925eb24554ccff6a864f6a387447a8c77b13ce1a1fe3306704ce08480ef3499eea6001020753c9afe73908a6cee8d7416c463dd006e5b241bfeafb2cb96577add95372ca362014b298212541cf07098087d495069f64c049baf38a30d2147b2787c5aa20b2561b06e933bce4150b9c491bba59dbca272f78aa61c0351da593bb9572b3ecd6073f5e4bfccbdc03b9f5749417413d3b494e5e35a0cf7631b569dc4bd1997ee9e17119677fa484fd65e6c55221b930574dfec2520c2f41db87efd09c6eb963062a9fbb4a0b1d004989ad1421f6b839643f1e9da0ebfa5b5d17318a7874fd7beb1a8af9778761ed161cb13c5073e3181b31a6134d517e799ef5c7819c336000667e4267934f96ad5e6a73a80e1dea0da9d2acd98050b068d4d635e2f7a20544d0ed7c80684cf10628cdc6bcfd37c3a9dc618db76e8ca773b3ff514593f5b616055cd81ebfc0b80dd23ea3ee490fbe7adc389a4b5e99fd33c2a8c34920cefcdf49280ac0fa559bcf9d19e31e38d58905c5f7ecb6e327ba0b817670804159b79fe4906b57d5e564bf69783e73f46a03d66b93144df26d253f59d842fffbba759ae3b21f4e3a4d66c24c9e325a6507262af163a0db94bea3f6610d2f758fbf11351e498483bcfffcd6e32ac00aa40ca4201e740f40b52f36b1e3ece8f0b676589d70a5046b9aca5a4f4849002769f0d13852e4154c149bb93b0607188b6b51fc0344827ce7ea194f62d851c29bee9650a371371ae3bb11383f8a993255d243eded18974695ec086e012028c08a2ce27e3a21372a1d137539138c3a1e173857105ae2d11bce73301e8753ae88bdbfaf1a00c95d17a993666374e461eb363d0b550347cb93108ac8c2618b7b604e6ceee91cb2899f0f9ef29daac2e6b8dd8e39e780699f97d3efebde88e458c7ecd68f39be7596d21b32d1121e24d12617c777344a068045bc6f27aee4366358cad490c1050fa40bca31c48e48e6c7b5ba200f37e8810c7a9a1f51a2c9020d564b3fe99adb6c3dc23ef58d250a8c76d6658d57f97a275dd25b3d710b3a7bd9517d17f7b383d6bf034a1c5a409bf4b2155c08f36fbb19c40d8ccbc920a690ecdc6aad248253413344def4195b1aeac8325f0aa7f956de00e254eed82171c927ad545c8a8d521c3724e781d663cb1851b348ff2a6e6944ac3091a475525f304d666e9b2b6f3b9c98f4692fe1b9ad7d1b2014f12faf708f1bc4aae92a03b1ef6809e95417190ee5e4a513613b319747b15e57f06233b9fa3f1a075c9008c6689993a60551e3c3f1f7570650875f827845ae6bd28c953f0b5da591ebfadef45cc8cf7f1775e2007290cba4566c6b718d09bc8999c1601a3d0a74f62fdd941b52c9d5fe8fa914fdd07db35db1d95d344f829d9794e7797f7bc795a8246a3c8e82caeadadf913e650d4babd4b862b06512bec95d379d929735e60d4d87831c9d2a370c8a533f2e511ecaaf924b7fbf81b3c0625c19be69a09cd5c6f1cef0f03e45aac2d66baec817dadd41a784259a056ea22853daa527fdf720a2bfb1ec25bc1428891d39c052c15d69f8553d6da0685648c8d1c0872eb3be0980ee726f44820f4fa71ebb41c310b79a0f7fbc11598e4b11cddc3d320431962c7a812bdf3c51c0183b8b4a7e9c54e1245c2d8c95b394f076a0cc0d25acd6950db5ca366f1eb33101035e0afc8d6e9c22f738f84f6fc35637fefc8a7c8929dc15a1567d18dde6ecfd58196872ee22a3dc0a13f8bd7867020ba7643877297e8d784193398052418d076f6416de95ff165de2c8794688516fb8d2a24203db44f553081afc6746f6c87b899dee08a2924b31b04f1215cc0354efe12c898b17af6d8964bef3ee38c19f0a0b9245a499d5ee5f04cc7ef40b7cb51c10503e6518ff65bd288f188f6005eeb02f405b8e390ebcfa6acf19f2882a6e29749210a97b7c855af6b41e5e04315522a3760652da7fe6f2d884f7dd8a3f5a31aea1c6a4a8a121a9feee57ed9312b5f8661a66ba841068cb040c679faa54b383513ab5b8e7e10111c600a2eee4e3e256e53be76c51496f8976e5bbf01c9bce6125f48dba6d0c7a50cde062fc015f3b60214313937b6f1e71391281beb015984b55487bac3ce851bde366a40183e0f095b1acb61c3b1b65e48ea22a9912da973b7341f0bc0da15cbbefdeb3583ad51a2f27fa2834145dd5b1075e7757d8d3f084f5236f5e12ef9cc037d01ca6212edd3aee70c59e88f82d10e71688411278442c91a079bf2415ad74073926bb728e379fe6efe16cca264b0181e0e1d8e472c4b81d66ddee157ef4ba47f242368fb2516aa3d7c13f0a8a3734fd3223ddefb7f1b78ecd247ff37745adf4a775f80bcfea1d080a508ebc837e73417313e1f2f1c4ee4c40cf8ea88b411b8ac5f88d4bbe8d3ca09afb087a355af976f36e53574b2cab38b5c316101f52f067f95500721bdb758fd14650db24a679d089f1cc8a5c60f93c5e7517c5118b890254f1ce10702dd3c69fb718011e0cbdeb7ffc67967467a151ced262e2d0292baec511394c53db9a897e4e7e1aa9c453f4d81e231b811d192bb276a16de06387178477454eb5c1489e6da65d70b6bba6d4209d950d333a749f16e7ef1d16707eb410a6ea92af8fb380b87f1fbe3a63904c707faf0ce2371a4238f3cca1bf89532c7e4838cfbcfe4e45fb6f708060b0a4f95a080e39e49242873d62d8de78139bf3e1206c9f7ec20d59c471ce45e1d65a7a639b7164b0ebfa7d466f698e2230a6f269f273f7d1b1f42ea7cef88d6585abda94b870a7a9e7f1deb14466750f9041bd85516284ac7dd0113f08ad8607023b756fc6ef3fcc4d7a274685eef1fcce9568286784ef4044d713a30909283dec9f9569f49c22c3f38f0e7c58aef9023fd2be8e5ed14b78db4ced492b23ac5259a0116ab52dc51ab5018f0728ab8a84fa923467d41f7256f13e5c3f45e2107c519ca9a933275ad6f116911a19d335d274af0d882211860dc8ec214523230a72faff10deb9c9b529daf2f571648cc10af6536f0fc8aa8427116f047a6d081a877080b193d6110cb031e361b55982502d20e8750600392d171f70b35cdbebd10b88fab27c3242e4d3ab63add383a5d3f365dd83911f1e0fac50d2ea5eb3398fd933b287e432d6e6bc99cf5b0c85e467721fcd9e1ccb482309149bc99fe04ef0bc448d73e163312a8663fcad45bf0c24dbb506d2eb57d2af29e9558477d54272606010187c1a6a76a43e9117e321b184795967658df7305aa000a41a0984d2d4440ba6c61cd1a61c68241402a05f4b32ff42c199666b2749a09034d2c56803d030fedb1c26246e7be3402d9cd1471b03ac0563f19b7743a788bac7b65") ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:47:03 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) [ 481.675264][ T3454] FAULT_INJECTION: forcing a failure. [ 481.675264][ T3454] name failslab, interval 1, probability 0, space 0, times 0 [ 481.753166][ T3454] CPU: 0 PID: 3454 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 481.763205][ T3454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 481.773282][ T3454] Call Trace: [ 481.776578][ T3454] [ 481.779526][ T3454] dump_stack_lvl+0x125/0x1b0 [ 481.784238][ T3454] should_fail_ex+0x496/0x5b0 [ 481.788952][ T3454] should_failslab+0x9/0x20 [ 481.793489][ T3454] kmem_cache_alloc+0x61/0x400 [ 481.798280][ T3454] ? lock_acquire+0x464/0x510 [ 481.802989][ T3454] __kernfs_new_node+0xd3/0x8a0 [ 481.807867][ T3454] ? kernfs_add_one+0x3ca/0x510 [ 481.812744][ T3454] ? kernfs_path_from_node+0x60/0x60 [ 481.818061][ T3454] ? down_write+0x14f/0x200 [ 481.822596][ T3454] ? down_write+0x14f/0x200 [ 481.827109][ T3454] ? up_write+0x1b3/0x510 [ 481.831444][ T3454] kernfs_new_node+0x94/0x110 [ 481.836147][ T3454] __kernfs_create_file+0x53/0x340 [ 481.841274][ T3454] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 481.846748][ T3454] sysfs_merge_group+0x1b1/0x330 [ 481.852127][ T3454] ? sysfs_update_groups+0x30/0x30 [ 481.857248][ T3454] ? panel_show+0xf0/0xf0 [ 481.861584][ T3454] ? bus_to_subsys+0x129/0x160 [ 481.866348][ T3454] dpm_sysfs_add+0x22f/0x280 [ 481.870988][ T3454] device_add+0x9e7/0x1ac0 [ 481.875463][ T3454] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 481.882324][ T3454] ? lockdep_init_map_type+0x16d/0x7c0 [ 481.887798][ T3454] nfc_register_device+0x41/0x3c0 [ 481.892832][ T3454] nci_register_device+0x7f4/0xb80 [ 481.897987][ T3454] ? nci_init_complete_req+0x410/0x410 [ 481.903481][ T3454] ? lockdep_init_map_type+0x16d/0x7c0 [ 481.908950][ T3454] virtual_ncidev_open+0x147/0x220 [ 481.914093][ T3454] ? virtual_ncidev_read+0x4e0/0x4e0 [ 481.919388][ T3454] misc_open+0x3da/0x4c0 [ 481.923809][ T3454] ? misc_devnode+0x120/0x120 [ 481.928486][ T3454] chrdev_open+0x277/0x700 [ 481.932901][ T3454] ? __unregister_chrdev+0x100/0x100 [ 481.938184][ T3454] ? fsnotify_perm.part.0+0x25d/0x630 [ 481.943570][ T3454] ? fsnotify_perm.part.0+0x268/0x630 [ 481.948944][ T3454] do_dentry_open+0x88b/0x1730 [ 481.953711][ T3454] ? __unregister_chrdev+0x100/0x100 [ 481.958999][ T3454] ? may_open+0x1f2/0x400 [ 481.963440][ T3454] path_openat+0x19af/0x29c0 [ 481.968035][ T3454] ? path_lookupat+0x770/0x770 [ 481.972812][ T3454] do_filp_open+0x1de/0x430 [ 481.977316][ T3454] ? may_open_dev+0xf0/0xf0 [ 481.981816][ T3454] ? expand_files+0x442/0x910 [ 481.986500][ T3454] ? _raw_spin_unlock+0x28/0x40 [ 481.991355][ T3454] ? alloc_fd+0x2da/0x6c0 [ 481.995689][ T3454] do_sys_openat2+0x176/0x1e0 [ 482.000379][ T3454] ? build_open_flags+0x690/0x690 [ 482.005482][ T3454] __x64_sys_openat+0x175/0x210 [ 482.010334][ T3454] ? __ia32_sys_open+0x1e0/0x1e0 [ 482.015275][ T3454] ? ksys_write+0x1a7/0x250 [ 482.019819][ T3454] ? rcu_is_watching+0x12/0xb0 [ 482.024607][ T3454] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 482.030600][ T3454] do_syscall_64+0x38/0xb0 [ 482.035103][ T3454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 482.041025][ T3454] RIP: 0033:0x7fafba27cae9 [ 482.045451][ T3454] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 482.065237][ T3454] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 482.073658][ T3454] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 482.081629][ T3454] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 482.089600][ T3454] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 482.097657][ T3454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 482.105627][ T3454] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 482.113601][ T3454] 09:47:03 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000000c0)) 09:47:03 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x4, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5a401c33}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000005}, 0x1) 09:47:04 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x81) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000040)={0x80000000, 0x4, 0x8}) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r2, 0x4b36) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040055}, 0x80) 09:47:04 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 51) 09:47:04 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x40086602, &(0x7f0000000e00)) 09:47:04 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x5dafc9dd38ae9950, r0}, 0x0) (async) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000e40)="14a11219acec0d6632e10fab75bdd2ec60008b9661ebd4447a25068e5fabfeb6bd46c3291b567445e31bf53a1f51faa9655ba9524c5e6e7c14bc4c5d4c26d2a3573b0ac2dfc5d0b0c2c98998bcdfc775d14e8c306535a046f36847533d95fab1acce1050393686552df88b3e4ab93cc886f492cf719b64e5c4c4c3802e8dadb9b60f11d756ebdee3de9c5f01924f016a9244c6148cd22d6ae7b6b8e5b3274782d08a9e7d19bde652c71f42b82feb028a5cb292ab801cd0f590c73b6abf5af2c6bb60edbfbb2c7ffb48093d4e1c65761217c30fae335df1c0d04498372827edda95e5b6d524052608db1910ced7831efd999569f24bd4cb473a12aaab822b9b7c181dbc314545d0112d2d506cdf394362e05a9fee9e686ecf1b8df84538c4bc38d36dc16d1be6b17360726497850131eb7f65a18174b4ac4eef145254e0047db195119007407e8c69fb9f95c2482f9c723b38a8be8b1cf8b6188939e78e130aece4142bf6d87cdb3e0e273ced2e39a55646c148a7eaa4deb143d051555b5b1ada89f2baa2a1470d38f6082c9943d4b3e946126dc19428e58bb8d0a17b3e5c34cf185026a1c5d43532ed7106e3631cb9d18554c5c03ba0cd4ab53622e2ba484878841eea0fd782d460cbbb906d0e8da89c1dd195791e4799cf70439d4f49e878026485125c76608dd487f187c75460cb53f36589bd4bf191206d12abf9807bfee9be79a7630499ac98c9b76d3c679d7a216aa1b7edea961859df4728e89ed638b9d497f5c3e769638092f8002abb70a806cb605b5855d8e8bcb83c8fe87bd76b9d204bf8af167eea6604c2582fadf71b9d13b31fe71591d04ed0c810118d6c26b0134e5154ab98832b972735afa461006bed70ab8ce2adc1566314b59c992cef629c09eb64fe5eeac1cd380a71a655047f36334407010fc421f5436578bf16780a2550d44c8764d8a85442695e5a05d1051ea5818cd7661b299b34c444785ece659f95a4fef6c1f6fa4340746c9cf710cf6c17ee5caa3b6799258e3bbefabb475fab2fa9eb64fc2a786cd044309f4a530a472b9a9f2fa3cb758a40d73bee9ce29cde92e3a27a32445840afcbdbe483065b9b50252780d58e3c5f05222d965a643681586172196a9161631c96454e14e94f7ce3462820d92a34c42a2f2852a84b3dec81367f5e7ce0c4d5c80b676c99d404338a3e4383e2c52578af6ddb5b497333bbcfe4652ce5a3fd7c2034f04bd0cf070ab23cefbc1a689fb8906d6d736099d4d8aedec772942022c8c8ac3b9ecb186fc73e8a5f18aaacdad51f8ceb7624079990c63b85868d78c0c18b06ada75b88b443cd0e5f697f1bf1318d29f77265f1b61a499b5a08b2a42950d822f37d1eb41427e83c8fa3d47339cb9495cfc8b6d19ac127ba8fa3b8745ea152287f93aea58d7119f13e144a87e3480d4b828cd31a6b5b6ecd5f7364d6b8e691233a57a86d68f1a3521e43477df98e629286232dfb8b798660fcaa54355af7f07331bb3ff7820717d17fb9b23a02a4016ce02dc6164ed58e40bc89aeaeb1264cf283881efc3ea2753e8171ef9c4ed681c28ce36a83937ddbee42dd307a8fdde6ecd579d56bded472bccffb453f8245a509d2c7838aa39eff762459209afa97b8ba28de1b6764343407339f5b50d95e58b02713096838bbc0eea1de0310b19c2e4f3ae291c11a4cb0ae501656dc4988d29d931ace0c9b039422b9f8edaab318663ccd5972d0df26c5d57e07ca08083d0674bc206d80511d124c3aee8d964071d5053c25cc3607ce062ebb9f68da6aa106cae8950cb9cbdd456578a3edf2dc25b16ca5885ed93810dcfaa4c68e8e72edaad59c98250e0dfd96a248e03a42c03a03cf2e7d34fd68a368e20b3811ee5ae933ae6eec029ea3b2b103367be32aa6d2e9310b2b80d15e796f2e6f5f542338f1fd87e1206bbbdad08518b8b4b548ddfea25da70feac51ee3a3036e186b6cd995ff148230de0ced3636e4d6398da6a29fdcea57e7b0d30687e42896fd83555f25c6e00dd12a5853e66ab365af801f26a26abf1dc1e70e9cc3f9037183a42989600a0aaa8456c47cea3115db36ba545969bdc3e864e9d6164e3f84dfd3608c634386d4af2ef246a98d048d481228ecd1d1ea41128738dd488fa87265e59a686c60fec17b602c65c7ce098bb44918289cf6a8b472441ec1fc99eca5cff7bede24694fa9de0a7915f381ac3703576bb7de4b109d53ba4d3936f53925451d53730d54cfd297e54ecebe8f5df785c3ad6f8fac12b2421c928f0fbca3ef178103c673b41d6cbede45ec2ccc46cfa1d4360d09ca1538df898dd3ac7d22a35c0031afd63f902881d40b753fa4449fadc34dc664c90831cfc22860140408b59e88748f4ba40bbc181dfefea995c7a0b144ab347bac184a692bcd69fac925eb24554ccff6a864f6a387447a8c77b13ce1a1fe3306704ce08480ef3499eea6001020753c9afe73908a6cee8d7416c463dd006e5b241bfeafb2cb96577add95372ca362014b298212541cf07098087d495069f64c049baf38a30d2147b2787c5aa20b2561b06e933bce4150b9c491bba59dbca272f78aa61c0351da593bb9572b3ecd6073f5e4bfccbdc03b9f5749417413d3b494e5e35a0cf7631b569dc4bd1997ee9e17119677fa484fd65e6c55221b930574dfec2520c2f41db87efd09c6eb963062a9fbb4a0b1d004989ad1421f6b839643f1e9da0ebfa5b5d17318a7874fd7beb1a8af9778761ed161cb13c5073e3181b31a6134d517e799ef5c7819c336000667e4267934f96ad5e6a73a80e1dea0da9d2acd98050b068d4d635e2f7a20544d0ed7c80684cf10628cdc6bcfd37c3a9dc618db76e8ca773b3ff514593f5b616055cd81ebfc0b80dd23ea3ee490fbe7adc389a4b5e99fd33c2a8c34920cefcdf49280ac0fa559bcf9d19e31e38d58905c5f7ecb6e327ba0b817670804159b79fe4906b57d5e564bf69783e73f46a03d66b93144df26d253f59d842fffbba759ae3b21f4e3a4d66c24c9e325a6507262af163a0db94bea3f6610d2f758fbf11351e498483bcfffcd6e32ac00aa40ca4201e740f40b52f36b1e3ece8f0b676589d70a5046b9aca5a4f4849002769f0d13852e4154c149bb93b0607188b6b51fc0344827ce7ea194f62d851c29bee9650a371371ae3bb11383f8a993255d243eded18974695ec086e012028c08a2ce27e3a21372a1d137539138c3a1e173857105ae2d11bce73301e8753ae88bdbfaf1a00c95d17a993666374e461eb363d0b550347cb93108ac8c2618b7b604e6ceee91cb2899f0f9ef29daac2e6b8dd8e39e780699f97d3efebde88e458c7ecd68f39be7596d21b32d1121e24d12617c777344a068045bc6f27aee4366358cad490c1050fa40bca31c48e48e6c7b5ba200f37e8810c7a9a1f51a2c9020d564b3fe99adb6c3dc23ef58d250a8c76d6658d57f97a275dd25b3d710b3a7bd9517d17f7b383d6bf034a1c5a409bf4b2155c08f36fbb19c40d8ccbc920a690ecdc6aad248253413344def4195b1aeac8325f0aa7f956de00e254eed82171c927ad545c8a8d521c3724e781d663cb1851b348ff2a6e6944ac3091a475525f304d666e9b2b6f3b9c98f4692fe1b9ad7d1b2014f12faf708f1bc4aae92a03b1ef6809e95417190ee5e4a513613b319747b15e57f06233b9fa3f1a075c9008c6689993a60551e3c3f1f7570650875f827845ae6bd28c953f0b5da591ebfadef45cc8cf7f1775e2007290cba4566c6b718d09bc8999c1601a3d0a74f62fdd941b52c9d5fe8fa914fdd07db35db1d95d344f829d9794e7797f7bc795a8246a3c8e82caeadadf913e650d4babd4b862b06512bec95d379d929735e60d4d87831c9d2a370c8a533f2e511ecaaf924b7fbf81b3c0625c19be69a09cd5c6f1cef0f03e45aac2d66baec817dadd41a784259a056ea22853daa527fdf720a2bfb1ec25bc1428891d39c052c15d69f8553d6da0685648c8d1c0872eb3be0980ee726f44820f4fa71ebb41c310b79a0f7fbc11598e4b11cddc3d320431962c7a812bdf3c51c0183b8b4a7e9c54e1245c2d8c95b394f076a0cc0d25acd6950db5ca366f1eb33101035e0afc8d6e9c22f738f84f6fc35637fefc8a7c8929dc15a1567d18dde6ecfd58196872ee22a3dc0a13f8bd7867020ba7643877297e8d784193398052418d076f6416de95ff165de2c8794688516fb8d2a24203db44f553081afc6746f6c87b899dee08a2924b31b04f1215cc0354efe12c898b17af6d8964bef3ee38c19f0a0b9245a499d5ee5f04cc7ef40b7cb51c10503e6518ff65bd288f188f6005eeb02f405b8e390ebcfa6acf19f2882a6e29749210a97b7c855af6b41e5e04315522a3760652da7fe6f2d884f7dd8a3f5a31aea1c6a4a8a121a9feee57ed9312b5f8661a66ba841068cb040c679faa54b383513ab5b8e7e10111c600a2eee4e3e256e53be76c51496f8976e5bbf01c9bce6125f48dba6d0c7a50cde062fc015f3b60214313937b6f1e71391281beb015984b55487bac3ce851bde366a40183e0f095b1acb61c3b1b65e48ea22a9912da973b7341f0bc0da15cbbefdeb3583ad51a2f27fa2834145dd5b1075e7757d8d3f084f5236f5e12ef9cc037d01ca6212edd3aee70c59e88f82d10e71688411278442c91a079bf2415ad74073926bb728e379fe6efe16cca264b0181e0e1d8e472c4b81d66ddee157ef4ba47f242368fb2516aa3d7c13f0a8a3734fd3223ddefb7f1b78ecd247ff37745adf4a775f80bcfea1d080a508ebc837e73417313e1f2f1c4ee4c40cf8ea88b411b8ac5f88d4bbe8d3ca09afb087a355af976f36e53574b2cab38b5c316101f52f067f95500721bdb758fd14650db24a679d089f1cc8a5c60f93c5e7517c5118b890254f1ce10702dd3c69fb718011e0cbdeb7ffc67967467a151ced262e2d0292baec511394c53db9a897e4e7e1aa9c453f4d81e231b811d192bb276a16de06387178477454eb5c1489e6da65d70b6bba6d4209d950d333a749f16e7ef1d16707eb410a6ea92af8fb380b87f1fbe3a63904c707faf0ce2371a4238f3cca1bf89532c7e4838cfbcfe4e45fb6f708060b0a4f95a080e39e49242873d62d8de78139bf3e1206c9f7ec20d59c471ce45e1d65a7a639b7164b0ebfa7d466f698e2230a6f269f273f7d1b1f42ea7cef88d6585abda94b870a7a9e7f1deb14466750f9041bd85516284ac7dd0113f08ad8607023b756fc6ef3fcc4d7a274685eef1fcce9568286784ef4044d713a30909283dec9f9569f49c22c3f38f0e7c58aef9023fd2be8e5ed14b78db4ced492b23ac5259a0116ab52dc51ab5018f0728ab8a84fa923467d41f7256f13e5c3f45e2107c519ca9a933275ad6f116911a19d335d274af0d882211860dc8ec214523230a72faff10deb9c9b529daf2f571648cc10af6536f0fc8aa8427116f047a6d081a877080b193d6110cb031e361b55982502d20e8750600392d171f70b35cdbebd10b88fab27c3242e4d3ab63add383a5d3f365dd83911f1e0fac50d2ea5eb3398fd933b287e432d6e6bc99cf5b0c85e467721fcd9e1ccb482309149bc99fe04ef0bc448d73e163312a8663fcad45bf0c24dbb506d2eb57d2af29e9558477d54272606010187c1a6a76a43e9117e321b184795967658df7305aa000a41a0984d2d4440ba6c61cd1a61c68241402a05f4b32ff42c199666b2749a09034d2c56803d030fedb1c26246e7be3402d9cd1471b03ac0563f19b7743a788bac7b65") ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:47:04 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000000c0)) 09:47:04 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x81) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000040)={0x80000000, 0x4, 0x8}) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r2, 0x4b36) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040055}, 0x80) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCMBIS(r0, 0x5416, 0x0) (async) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x81) (async) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000040)={0x80000000, 0x4, 0x8}) (async) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r2, 0x4b36) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r3, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040055}, 0x80) (async) 09:47:04 executing program 3: setpriority(0x2, 0xffffffffffffffff, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:47:04 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000000c0)) 09:47:04 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) (async) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x81) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000040)={0x80000000, 0x4, 0x8}) (async) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r2, 0x4b36) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r3, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040055}, 0x80) 09:47:04 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x40087602, &(0x7f0000000e00)) [ 482.445196][ T3496] FAULT_INJECTION: forcing a failure. [ 482.445196][ T3496] name failslab, interval 1, probability 0, space 0, times 0 [ 482.510017][ T3496] CPU: 1 PID: 3496 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 482.520246][ T3496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 482.530409][ T3496] Call Trace: [ 482.533716][ T3496] [ 482.536666][ T3496] dump_stack_lvl+0x125/0x1b0 [ 482.541387][ T3496] should_fail_ex+0x496/0x5b0 [ 482.546114][ T3496] should_failslab+0x9/0x20 [ 482.550655][ T3496] kmem_cache_alloc+0x61/0x400 [ 482.555447][ T3496] ? lock_acquire+0x464/0x510 09:47:04 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = syz_open_pts(r1, 0xa60c0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000380)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) connect$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x0, {0x2, 0xff, 0x2}}, 0x18) socketpair(0x1f, 0x3, 0x80, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getnexthop={0x28, 0x6a, 0x608, 0x70bd25, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x40041) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000003c0), 0x4) recvmsg$can_j1939(r0, 0x0, 0x40000000) socketpair(0x3, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$can_j1939(r6, &(0x7f0000000340)={0x1d, r3, 0x2, {0x1, 0x0, 0x1}}, 0x18) 09:47:04 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async, rerun: 64) syz_open_pts(r2, 0x0) (async, rerun: 64) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x5dafc9dd38ae9950, r0}, 0x0) (async, rerun: 64) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000e40)="14a11219acec0d6632e10fab75bdd2ec60008b9661ebd4447a25068e5fabfeb6bd46c3291b567445e31bf53a1f51faa9655ba9524c5e6e7c14bc4c5d4c26d2a3573b0ac2dfc5d0b0c2c98998bcdfc775d14e8c306535a046f36847533d95fab1acce1050393686552df88b3e4ab93cc886f492cf719b64e5c4c4c3802e8dadb9b60f11d756ebdee3de9c5f01924f016a9244c6148cd22d6ae7b6b8e5b3274782d08a9e7d19bde652c71f42b82feb028a5cb292ab801cd0f590c73b6abf5af2c6bb60edbfbb2c7ffb48093d4e1c65761217c30fae335df1c0d04498372827edda95e5b6d524052608db1910ced7831efd999569f24bd4cb473a12aaab822b9b7c181dbc314545d0112d2d506cdf394362e05a9fee9e686ecf1b8df84538c4bc38d36dc16d1be6b17360726497850131eb7f65a18174b4ac4eef145254e0047db195119007407e8c69fb9f95c2482f9c723b38a8be8b1cf8b6188939e78e130aece4142bf6d87cdb3e0e273ced2e39a55646c148a7eaa4deb143d051555b5b1ada89f2baa2a1470d38f6082c9943d4b3e946126dc19428e58bb8d0a17b3e5c34cf185026a1c5d43532ed7106e3631cb9d18554c5c03ba0cd4ab53622e2ba484878841eea0fd782d460cbbb906d0e8da89c1dd195791e4799cf70439d4f49e878026485125c76608dd487f187c75460cb53f36589bd4bf191206d12abf9807bfee9be79a7630499ac98c9b76d3c679d7a216aa1b7edea961859df4728e89ed638b9d497f5c3e769638092f8002abb70a806cb605b5855d8e8bcb83c8fe87bd76b9d204bf8af167eea6604c2582fadf71b9d13b31fe71591d04ed0c810118d6c26b0134e5154ab98832b972735afa461006bed70ab8ce2adc1566314b59c992cef629c09eb64fe5eeac1cd380a71a655047f36334407010fc421f5436578bf16780a2550d44c8764d8a85442695e5a05d1051ea5818cd7661b299b34c444785ece659f95a4fef6c1f6fa4340746c9cf710cf6c17ee5caa3b6799258e3bbefabb475fab2fa9eb64fc2a786cd044309f4a530a472b9a9f2fa3cb758a40d73bee9ce29cde92e3a27a32445840afcbdbe483065b9b50252780d58e3c5f05222d965a643681586172196a9161631c96454e14e94f7ce3462820d92a34c42a2f2852a84b3dec81367f5e7ce0c4d5c80b676c99d404338a3e4383e2c52578af6ddb5b497333bbcfe4652ce5a3fd7c2034f04bd0cf070ab23cefbc1a689fb8906d6d736099d4d8aedec772942022c8c8ac3b9ecb186fc73e8a5f18aaacdad51f8ceb7624079990c63b85868d78c0c18b06ada75b88b443cd0e5f697f1bf1318d29f77265f1b61a499b5a08b2a42950d822f37d1eb41427e83c8fa3d47339cb9495cfc8b6d19ac127ba8fa3b8745ea152287f93aea58d7119f13e144a87e3480d4b828cd31a6b5b6ecd5f7364d6b8e691233a57a86d68f1a3521e43477df98e629286232dfb8b798660fcaa54355af7f07331bb3ff7820717d17fb9b23a02a4016ce02dc6164ed58e40bc89aeaeb1264cf283881efc3ea2753e8171ef9c4ed681c28ce36a83937ddbee42dd307a8fdde6ecd579d56bded472bccffb453f8245a509d2c7838aa39eff762459209afa97b8ba28de1b6764343407339f5b50d95e58b02713096838bbc0eea1de0310b19c2e4f3ae291c11a4cb0ae501656dc4988d29d931ace0c9b039422b9f8edaab318663ccd5972d0df26c5d57e07ca08083d0674bc206d80511d124c3aee8d964071d5053c25cc3607ce062ebb9f68da6aa106cae8950cb9cbdd456578a3edf2dc25b16ca5885ed93810dcfaa4c68e8e72edaad59c98250e0dfd96a248e03a42c03a03cf2e7d34fd68a368e20b3811ee5ae933ae6eec029ea3b2b103367be32aa6d2e9310b2b80d15e796f2e6f5f542338f1fd87e1206bbbdad08518b8b4b548ddfea25da70feac51ee3a3036e186b6cd995ff148230de0ced3636e4d6398da6a29fdcea57e7b0d30687e42896fd83555f25c6e00dd12a5853e66ab365af801f26a26abf1dc1e70e9cc3f9037183a42989600a0aaa8456c47cea3115db36ba545969bdc3e864e9d6164e3f84dfd3608c634386d4af2ef246a98d048d481228ecd1d1ea41128738dd488fa87265e59a686c60fec17b602c65c7ce098bb44918289cf6a8b472441ec1fc99eca5cff7bede24694fa9de0a7915f381ac3703576bb7de4b109d53ba4d3936f53925451d53730d54cfd297e54ecebe8f5df785c3ad6f8fac12b2421c928f0fbca3ef178103c673b41d6cbede45ec2ccc46cfa1d4360d09ca1538df898dd3ac7d22a35c0031afd63f902881d40b753fa4449fadc34dc664c90831cfc22860140408b59e88748f4ba40bbc181dfefea995c7a0b144ab347bac184a692bcd69fac925eb24554ccff6a864f6a387447a8c77b13ce1a1fe3306704ce08480ef3499eea6001020753c9afe73908a6cee8d7416c463dd006e5b241bfeafb2cb96577add95372ca362014b298212541cf07098087d495069f64c049baf38a30d2147b2787c5aa20b2561b06e933bce4150b9c491bba59dbca272f78aa61c0351da593bb9572b3ecd6073f5e4bfccbdc03b9f5749417413d3b494e5e35a0cf7631b569dc4bd1997ee9e17119677fa484fd65e6c55221b930574dfec2520c2f41db87efd09c6eb963062a9fbb4a0b1d004989ad1421f6b839643f1e9da0ebfa5b5d17318a7874fd7beb1a8af9778761ed161cb13c5073e3181b31a6134d517e799ef5c7819c336000667e4267934f96ad5e6a73a80e1dea0da9d2acd98050b068d4d635e2f7a20544d0ed7c80684cf10628cdc6bcfd37c3a9dc618db76e8ca773b3ff514593f5b616055cd81ebfc0b80dd23ea3ee490fbe7adc389a4b5e99fd33c2a8c34920cefcdf49280ac0fa559bcf9d19e31e38d58905c5f7ecb6e327ba0b817670804159b79fe4906b57d5e564bf69783e73f46a03d66b93144df26d253f59d842fffbba759ae3b21f4e3a4d66c24c9e325a6507262af163a0db94bea3f6610d2f758fbf11351e498483bcfffcd6e32ac00aa40ca4201e740f40b52f36b1e3ece8f0b676589d70a5046b9aca5a4f4849002769f0d13852e4154c149bb93b0607188b6b51fc0344827ce7ea194f62d851c29bee9650a371371ae3bb11383f8a993255d243eded18974695ec086e012028c08a2ce27e3a21372a1d137539138c3a1e173857105ae2d11bce73301e8753ae88bdbfaf1a00c95d17a993666374e461eb363d0b550347cb93108ac8c2618b7b604e6ceee91cb2899f0f9ef29daac2e6b8dd8e39e780699f97d3efebde88e458c7ecd68f39be7596d21b32d1121e24d12617c777344a068045bc6f27aee4366358cad490c1050fa40bca31c48e48e6c7b5ba200f37e8810c7a9a1f51a2c9020d564b3fe99adb6c3dc23ef58d250a8c76d6658d57f97a275dd25b3d710b3a7bd9517d17f7b383d6bf034a1c5a409bf4b2155c08f36fbb19c40d8ccbc920a690ecdc6aad248253413344def4195b1aeac8325f0aa7f956de00e254eed82171c927ad545c8a8d521c3724e781d663cb1851b348ff2a6e6944ac3091a475525f304d666e9b2b6f3b9c98f4692fe1b9ad7d1b2014f12faf708f1bc4aae92a03b1ef6809e95417190ee5e4a513613b319747b15e57f06233b9fa3f1a075c9008c6689993a60551e3c3f1f7570650875f827845ae6bd28c953f0b5da591ebfadef45cc8cf7f1775e2007290cba4566c6b718d09bc8999c1601a3d0a74f62fdd941b52c9d5fe8fa914fdd07db35db1d95d344f829d9794e7797f7bc795a8246a3c8e82caeadadf913e650d4babd4b862b06512bec95d379d929735e60d4d87831c9d2a370c8a533f2e511ecaaf924b7fbf81b3c0625c19be69a09cd5c6f1cef0f03e45aac2d66baec817dadd41a784259a056ea22853daa527fdf720a2bfb1ec25bc1428891d39c052c15d69f8553d6da0685648c8d1c0872eb3be0980ee726f44820f4fa71ebb41c310b79a0f7fbc11598e4b11cddc3d320431962c7a812bdf3c51c0183b8b4a7e9c54e1245c2d8c95b394f076a0cc0d25acd6950db5ca366f1eb33101035e0afc8d6e9c22f738f84f6fc35637fefc8a7c8929dc15a1567d18dde6ecfd58196872ee22a3dc0a13f8bd7867020ba7643877297e8d784193398052418d076f6416de95ff165de2c8794688516fb8d2a24203db44f553081afc6746f6c87b899dee08a2924b31b04f1215cc0354efe12c898b17af6d8964bef3ee38c19f0a0b9245a499d5ee5f04cc7ef40b7cb51c10503e6518ff65bd288f188f6005eeb02f405b8e390ebcfa6acf19f2882a6e29749210a97b7c855af6b41e5e04315522a3760652da7fe6f2d884f7dd8a3f5a31aea1c6a4a8a121a9feee57ed9312b5f8661a66ba841068cb040c679faa54b383513ab5b8e7e10111c600a2eee4e3e256e53be76c51496f8976e5bbf01c9bce6125f48dba6d0c7a50cde062fc015f3b60214313937b6f1e71391281beb015984b55487bac3ce851bde366a40183e0f095b1acb61c3b1b65e48ea22a9912da973b7341f0bc0da15cbbefdeb3583ad51a2f27fa2834145dd5b1075e7757d8d3f084f5236f5e12ef9cc037d01ca6212edd3aee70c59e88f82d10e71688411278442c91a079bf2415ad74073926bb728e379fe6efe16cca264b0181e0e1d8e472c4b81d66ddee157ef4ba47f242368fb2516aa3d7c13f0a8a3734fd3223ddefb7f1b78ecd247ff37745adf4a775f80bcfea1d080a508ebc837e73417313e1f2f1c4ee4c40cf8ea88b411b8ac5f88d4bbe8d3ca09afb087a355af976f36e53574b2cab38b5c316101f52f067f95500721bdb758fd14650db24a679d089f1cc8a5c60f93c5e7517c5118b890254f1ce10702dd3c69fb718011e0cbdeb7ffc67967467a151ced262e2d0292baec511394c53db9a897e4e7e1aa9c453f4d81e231b811d192bb276a16de06387178477454eb5c1489e6da65d70b6bba6d4209d950d333a749f16e7ef1d16707eb410a6ea92af8fb380b87f1fbe3a63904c707faf0ce2371a4238f3cca1bf89532c7e4838cfbcfe4e45fb6f708060b0a4f95a080e39e49242873d62d8de78139bf3e1206c9f7ec20d59c471ce45e1d65a7a639b7164b0ebfa7d466f698e2230a6f269f273f7d1b1f42ea7cef88d6585abda94b870a7a9e7f1deb14466750f9041bd85516284ac7dd0113f08ad8607023b756fc6ef3fcc4d7a274685eef1fcce9568286784ef4044d713a30909283dec9f9569f49c22c3f38f0e7c58aef9023fd2be8e5ed14b78db4ced492b23ac5259a0116ab52dc51ab5018f0728ab8a84fa923467d41f7256f13e5c3f45e2107c519ca9a933275ad6f116911a19d335d274af0d882211860dc8ec214523230a72faff10deb9c9b529daf2f571648cc10af6536f0fc8aa8427116f047a6d081a877080b193d6110cb031e361b55982502d20e8750600392d171f70b35cdbebd10b88fab27c3242e4d3ab63add383a5d3f365dd83911f1e0fac50d2ea5eb3398fd933b287e432d6e6bc99cf5b0c85e467721fcd9e1ccb482309149bc99fe04ef0bc448d73e163312a8663fcad45bf0c24dbb506d2eb57d2af29e9558477d54272606010187c1a6a76a43e9117e321b184795967658df7305aa000a41a0984d2d4440ba6c61cd1a61c68241402a05f4b32ff42c199666b2749a09034d2c56803d030fedb1c26246e7be3402d9cd1471b03ac0563f19b7743a788bac7b65") (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) [ 482.560170][ T3496] __kernfs_new_node+0xd3/0x8a0 [ 482.565054][ T3496] ? kernfs_add_one+0x3ca/0x510 [ 482.569937][ T3496] ? kernfs_path_from_node+0x60/0x60 [ 482.575263][ T3496] ? down_write+0x14f/0x200 [ 482.579798][ T3496] ? down_write+0x14f/0x200 [ 482.584325][ T3496] ? up_write+0x1b3/0x510 [ 482.588673][ T3496] kernfs_new_node+0x94/0x110 [ 482.593366][ T3496] __kernfs_create_file+0x53/0x340 [ 482.598661][ T3496] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 482.604058][ T3496] sysfs_merge_group+0x1b1/0x330 [ 482.609124][ T3496] ? sysfs_update_groups+0x30/0x30 [ 482.614331][ T3496] ? panel_show+0xf0/0xf0 [ 482.618682][ T3496] ? bus_to_subsys+0x129/0x160 [ 482.623536][ T3496] dpm_sysfs_add+0x22f/0x280 [ 482.628227][ T3496] device_add+0x9e7/0x1ac0 [ 482.632670][ T3496] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 482.639630][ T3496] ? lockdep_init_map_type+0x16d/0x7c0 [ 482.645098][ T3496] nfc_register_device+0x41/0x3c0 [ 482.650132][ T3496] nci_register_device+0x7f4/0xb80 [ 482.655326][ T3496] ? nci_init_complete_req+0x410/0x410 [ 482.660794][ T3496] ? lockdep_init_map_type+0x16d/0x7c0 [ 482.666286][ T3496] virtual_ncidev_open+0x147/0x220 [ 482.671429][ T3496] ? virtual_ncidev_read+0x4e0/0x4e0 [ 482.676744][ T3496] misc_open+0x3da/0x4c0 [ 482.681016][ T3496] ? misc_devnode+0x120/0x120 [ 482.685703][ T3496] chrdev_open+0x277/0x700 [ 482.690126][ T3496] ? __unregister_chrdev+0x100/0x100 [ 482.695410][ T3496] ? fsnotify_perm.part.0+0x25d/0x630 [ 482.700791][ T3496] ? fsnotify_perm.part.0+0x268/0x630 [ 482.706171][ T3496] do_dentry_open+0x88b/0x1730 [ 482.710945][ T3496] ? __unregister_chrdev+0x100/0x100 [ 482.716232][ T3496] ? may_open+0x1f2/0x400 [ 482.720655][ T3496] path_openat+0x19af/0x29c0 [ 482.725246][ T3496] ? path_lookupat+0x770/0x770 [ 482.730021][ T3496] do_filp_open+0x1de/0x430 [ 482.734529][ T3496] ? may_open_dev+0xf0/0xf0 [ 482.739029][ T3496] ? expand_files+0x442/0x910 [ 482.743747][ T3496] ? _raw_spin_unlock+0x28/0x40 [ 482.748602][ T3496] ? alloc_fd+0x2da/0x6c0 [ 482.752935][ T3496] do_sys_openat2+0x176/0x1e0 [ 482.757616][ T3496] ? build_open_flags+0x690/0x690 [ 482.762647][ T3496] __x64_sys_openat+0x175/0x210 [ 482.767501][ T3496] ? __ia32_sys_open+0x1e0/0x1e0 [ 482.772445][ T3496] ? ksys_write+0x1a7/0x250 [ 482.776952][ T3496] ? rcu_is_watching+0x12/0xb0 [ 482.781720][ T3496] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 482.787707][ T3496] do_syscall_64+0x38/0xb0 [ 482.792139][ T3496] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 482.798043][ T3496] RIP: 0033:0x7fafba27cae9 [ 482.802486][ T3496] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 482.822096][ T3496] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 482.830517][ T3496] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 482.838513][ T3496] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 482.846481][ T3496] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 482.854451][ T3496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 482.862420][ T3496] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 482.870399][ T3496] 09:47:04 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCMBIS(r0, 0x5416, 0x0) [ 482.960512][ T27] audit: type=1400 audit(1693734424.700:154): avc: denied { setopt } for pid=3526 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 483.002733][ T27] audit: type=1400 audit(1693734424.710:155): avc: denied { create } for pid=3526 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 09:47:04 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 52) 09:47:04 executing program 3: setpriority(0x2, 0xffffffffffffffff, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:47:04 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async, rerun: 64) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = syz_open_pts(r1, 0xa60c0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000380)) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) connect$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x0, {0x2, 0xff, 0x2}}, 0x18) (async) socketpair(0x1f, 0x3, 0x80, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getnexthop={0x28, 0x6a, 0x608, 0x70bd25, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x40041) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000003c0), 0x4) (async, rerun: 32) recvmsg$can_j1939(r0, 0x0, 0x40000000) (rerun: 32) socketpair(0x3, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$can_j1939(r6, &(0x7f0000000340)={0x1d, r3, 0x2, {0x1, 0x0, 0x1}}, 0x18) 09:47:04 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCMBIS(r0, 0x5416, 0x0) 09:47:04 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 09:47:04 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x40186366, &(0x7f0000000e00)) 09:47:05 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCMBIS(r0, 0x5416, 0x0) 09:47:05 executing program 3: setpriority(0x2, 0xffffffffffffffff, 0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:47:05 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x6) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x2002, r0}, 0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 09:47:05 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) [ 483.350287][ T3559] FAULT_INJECTION: forcing a failure. [ 483.350287][ T3559] name failslab, interval 1, probability 0, space 0, times 0 [ 483.367115][ T3559] CPU: 0 PID: 3559 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 483.377268][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 483.387340][ T3559] Call Trace: [ 483.390644][ T3559] [ 483.393594][ T3559] dump_stack_lvl+0x125/0x1b0 09:47:05 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_open_pts(r1, 0xa60c0) (async) r2 = syz_open_pts(r1, 0xa60c0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000380)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) connect$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x0, {0x2, 0xff, 0x2}}, 0x18) socketpair(0x1f, 0x3, 0x80, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getnexthop={0x28, 0x6a, 0x608, 0x70bd25, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x40041) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000003c0), 0x4) recvmsg$can_j1939(r0, 0x0, 0x40000000) (async) recvmsg$can_j1939(r0, 0x0, 0x40000000) socketpair(0x3, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$can_j1939(r6, &(0x7f0000000340)={0x1d, r3, 0x2, {0x1, 0x0, 0x1}}, 0x18) (async) connect$can_j1939(r6, &(0x7f0000000340)={0x1d, r3, 0x2, {0x1, 0x0, 0x1}}, 0x18) [ 483.398312][ T3559] should_fail_ex+0x496/0x5b0 [ 483.403033][ T3559] should_failslab+0x9/0x20 [ 483.407572][ T3559] kmem_cache_alloc+0x61/0x400 [ 483.412374][ T3559] __kernfs_new_node+0xd3/0x8a0 [ 483.417269][ T3559] ? kernfs_path_from_node+0x60/0x60 [ 483.422587][ T3559] ? lock_acquire+0x464/0x510 [ 483.427305][ T3559] ? kernfs_link_sibling+0x3f5/0x540 [ 483.432638][ T3559] ? rcu_is_watching+0x12/0xb0 [ 483.437441][ T3559] ? lock_release+0x4bf/0x680 [ 483.442151][ T3559] ? kernfs_add_one+0x3ca/0x510 [ 483.447046][ T3559] ? reacquire_held_locks+0x4b0/0x4b0 [ 483.452456][ T3559] ? down_write+0x14f/0x200 [ 483.457079][ T3559] kernfs_create_dir_ns+0x9a/0x210 [ 483.462230][ T3559] internal_create_group+0x780/0xb40 [ 483.467559][ T3559] ? kernfs_add_one+0x17f/0x510 [ 483.472468][ T3559] ? sysfs_remove_group+0x170/0x170 [ 483.477757][ T3559] ? panel_show+0xf0/0xf0 [ 483.482151][ T3559] ? bus_to_subsys+0x129/0x160 [ 483.487044][ T3559] dpm_sysfs_add+0x7c/0x280 [ 483.491709][ T3559] device_add+0x9e7/0x1ac0 [ 483.496169][ T3559] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 483.503065][ T3559] ? lockdep_init_map_type+0x16d/0x7c0 [ 483.508569][ T3559] nfc_register_device+0x41/0x3c0 [ 483.513624][ T3559] nci_register_device+0x7f4/0xb80 [ 483.519813][ T3559] ? nci_init_complete_req+0x410/0x410 [ 483.525331][ T3559] ? lockdep_init_map_type+0x16d/0x7c0 [ 483.530832][ T3559] virtual_ncidev_open+0x147/0x220 [ 483.535985][ T3559] ? virtual_ncidev_read+0x4e0/0x4e0 [ 483.541314][ T3559] misc_open+0x3da/0x4c0 [ 483.545592][ T3559] ? misc_devnode+0x120/0x120 09:47:05 executing program 3: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003380)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002300)=[{&(0x7f0000000080)=""/175, 0xaf}, {&(0x7f0000000140)=""/200, 0xc8}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/34, 0x22}, {&(0x7f0000001280)=""/21, 0x15}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/40, 0x28}], 0x7, &(0x7f0000002380)=""/4096, 0x1000}, 0x2000) r0 = socket(0x1a, 0x800, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000003480)={'gre0\x00', &(0x7f0000003400)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0020070080000001000001014a16002800660000802f907800000000640101018907c90000000000070ba4ac1414bbe000000100"]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000003540)={'syztnl1\x00', &(0x7f00000034c0)={'tunl0\x00', 0x0, 0x0, 0x700, 0x8a92, 0x9, {{0x18, 0x4, 0x2, 0x5, 0x60, 0x65, 0x0, 0x85, 0x2d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0xc, 0x41, 0x3, 0xc, [{@private=0xa010102, 0x3}]}, @rr={0x7, 0x13, 0xc1, [@multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}]}, @ssrr={0x89, 0x1b, 0xb3, [@empty, @empty, @remote, @loopback, @rand_addr=0x64010100, @multicast1]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x22, [@multicast2, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003600)={'syztnl0\x00', &(0x7f0000003580)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x2, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x1, 0x72f, 0x0, 0x3}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000036c0)={0xffffffffffffffff, 0x58, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000037c0)={'syztnl1\x00', &(0x7f0000003700)={'sit0\x00', 0x0, 0x80, 0x1, 0x1, 0x1, {{0x26, 0x4, 0x2, 0x8, 0x98, 0x66, 0x0, 0x8, 0x4, 0x0, @multicast2, @private=0xa010101, {[@timestamp_addr={0x44, 0x2c, 0xb1, 0x1, 0x2, [{@rand_addr=0x64010100, 0x7}, {@multicast2, 0x1}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7fff}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x41, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x20}]}, @timestamp_addr={0x44, 0x24, 0xcf, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x13}, 0xb8f3}, {@private=0xa010101, 0x10001}, {@multicast2, 0x400}, {@remote, 0xfffffff9}]}, @timestamp={0x44, 0x24, 0x75, 0x0, 0x1, [0x5, 0x4, 0x8001, 0x59, 0x1ff, 0x5, 0x2a400000, 0xfffffffe]}]}}}}}) r6 = syz_open_dev$vcsu(&(0x7f0000003b00), 0x100000000, 0xa002) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r7, 0x4b36) ioctl$HIDIOCGFIELDINFO(r7, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000140)) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r7}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r8, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003c40)={0x1e, 0x5, &(0x7f0000003a40)=@raw=[@alu={0x7, 0x1, 0x4, 0x0, 0x0, 0xffffffffffffffc0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x2c}, @generic={0xff, 0x8, 0x5, 0x7fff, 0x1ff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}], &(0x7f0000003a80)='GPL\x00', 0x4, 0x32, &(0x7f0000003ac0)=""/50, 0x41000, 0xf, '\x00', 0x0, 0x11, r6, 0x8, &(0x7f0000003b40)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000003b80)={0x3, 0x3, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000003bc0)=[r8, 0x1], &(0x7f0000003c00)=[{0x4, 0x4, 0xf, 0x1}, {0x0, 0x1, 0xf, 0xa}, {0x1, 0x2, 0x0, 0x7}], 0x10, 0x3}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003800)={'vxcan0\x00', 0x0}) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r10, 0x5416, 0x0) ioctl$PIO_FONTX(r10, 0x4b6c, &(0x7f0000003840)={0x1b1, 0x2, &(0x7f0000004180)="d93de844aa99843b4277a5ba5d6532444456b1eb70f47665703f664ddd343ec895c8bf57658a8f0e3e3c98d1161dfba89c2d6c5ece7402f4d220f7e90d10573117e60b362da114af536602b2b449662bb6eb50167622eca888515f8958d57e4fe210d5223c318815480732066ffac8208880bb265450fea971d743af17391a02d14d5d8363997479455e22358a8126cdbb9378a73d9f86de7e46314c6a1593d9026b010ef093507df4a9683c7e9cbddbd82814e53886cb25d42d103222bc3062406eaea4e6a735e64140f057d8ea1ef0f92aea3c741994a8d42ec12806a08234849bee3ef9672643f1a3faf1610fb7615d8dfff78d66852c3393251f15bd65f3d26e0f781df084257e63321b54e0f4c1cabe006f6a935f1b00ba3a47bb11d9d24c2d1c561b54ead20c95946c9179b899717fcfab355380a879f2657cccb5e3e7c13681f645753b7c38342e004b6cec13c1717af61593734b8ed827711fea0b719c750abd183cf19bf6b891e3291ffdd99f27241977705c5edc6335345b1eb01fda47669d70a3edbd3731a062f0047431d1ef1ce5e338888456729e32e1842bf8bd341078019405c0f55c8159f7092b5b28357ea008221fe87396cd58eda046bbd8211e4cfdb7a4d80b490b1dbaff8cacf140c9f988b63acfcb44f660f11f5121d6e6170df000777005f594f0f5a7ef6255af29f6f2f5f5f1f268453e414f74c7205793854817e888d8e6f5098238ed8e8e8fe32e8dc392080f5d291279f10e6e4f179f154266e607cd85fb9ff8909e81f36cca2c21780ea78b4d12d60736ae15bb98e68d40220374f51318a4c0eb9432d8897cbdd6950cfdbe41b7c130c2e8c650a9b625909acfb5c3349384d7512e4fc84d607bb18fa262db5d066f1767e792a15f7e8aa4067f9a9a75354c5156c74c4d47a534117397c0de2f1bad7347358c18dc264986f7e7dcea5825537b48afe1e30e4a879aed3c8d1155e5da2f76580e6bfd58bad1913867f0a69c3d52b6c0ce3c9447729dfc6115b04ff92257d5015efa4fc32c93fd30802ded7a81e218ed0db44f8e55ac77dff6b63741ff058881f2ce56bd1a894272e99a5ba5c4dbfe2a4df0343dcb0c143dbcb5e91918c6b39b2efd3d34cad5c3aad349ffb401fc97e208993953142ed70fba368fad02407bc4231ce2aac39448bbff4a863e74e6be970ca2ba9073f3c54f36071b322e6125de66a1e80199ad5bba8a61f05d0ca22484b284511920b8efb5cf6ffd7b4f96b0247a7de5a47bd09b62aff76fca97e8d0015811710bb4de24aff88cfff10102343e8883cf3eeba94defd0f40c306719605af7fd93d23cddfa4376b411ca443d87ba4c57eecb63c48c893345a3380ef92c4ff8358f17d02b2df015cb25daf75b02d69b16a231b8168aba994750b2e927cb06d24d1634a7641b8186f2cc205c050d10ab"}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000003a00)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000039c0)={&(0x7f0000004000)={0x150, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x150}}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003fc0)={r8, 0xe0, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003d00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000003d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003d80)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000003dc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000003e00), &(0x7f0000003e40), 0x8, 0x10, 0x8, 0x8, &(0x7f0000003e80)}}, 0x10) read$hidraw(0xffffffffffffffff, 0x0, 0x0) [ 483.550296][ T3559] chrdev_open+0x277/0x700 [ 483.554744][ T3559] ? __unregister_chrdev+0x100/0x100 [ 483.560075][ T3559] ? fsnotify_perm.part.0+0x25d/0x630 [ 483.565490][ T3559] ? fsnotify_perm.part.0+0x268/0x630 [ 483.570897][ T3559] do_dentry_open+0x88b/0x1730 [ 483.575699][ T3559] ? __unregister_chrdev+0x100/0x100 [ 483.581015][ T3559] ? may_open+0x1f2/0x400 [ 483.585381][ T3559] path_openat+0x19af/0x29c0 [ 483.590030][ T3559] ? path_lookupat+0x770/0x770 [ 483.594840][ T3559] do_filp_open+0x1de/0x430 [ 483.599374][ T3559] ? may_open_dev+0xf0/0xf0 [ 483.603904][ T3559] ? expand_files+0x442/0x910 [ 483.608623][ T3559] ? _raw_spin_unlock+0x28/0x40 [ 483.613527][ T3559] ? alloc_fd+0x2da/0x6c0 [ 483.617888][ T3559] do_sys_openat2+0x176/0x1e0 [ 483.622601][ T3559] ? build_open_flags+0x690/0x690 [ 483.627753][ T3559] __x64_sys_openat+0x175/0x210 [ 483.632654][ T3559] ? __ia32_sys_open+0x1e0/0x1e0 [ 483.637642][ T3559] ? ksys_write+0x1a7/0x250 [ 483.639680][ T27] audit: type=1400 audit(1693734425.430:156): avc: denied { create } for pid=3574 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 483.642173][ T3559] ? rcu_is_watching+0x12/0xb0 [ 483.642202][ T3559] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 483.672697][ T3559] do_syscall_64+0x38/0xb0 [ 483.677160][ T3559] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 483.683103][ T3559] RIP: 0033:0x7fafba27cae9 [ 483.687630][ T3559] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 483.707474][ T3559] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 483.715927][ T3559] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 483.723937][ T3559] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 483.731940][ T3559] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 483.740128][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.748211][ T3559] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 483.756214][ T3559] 09:47:05 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 53) 09:47:05 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r1, 0xdbeadd91291403) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r2, 0x5411, 0x0) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) recvmsg$can_j1939(r0, 0x0, 0x20) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000000)) memfd_create(&(0x7f00000000c0)='-\\\x00', 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r3, 0x5416, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x185) 09:47:05 executing program 3: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003380)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002300)=[{&(0x7f0000000080)=""/175, 0xaf}, {&(0x7f0000000140)=""/200, 0xc8}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/34, 0x22}, {&(0x7f0000001280)=""/21, 0x15}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/40, 0x28}], 0x7, &(0x7f0000002380)=""/4096, 0x1000}, 0x2000) r0 = socket(0x1a, 0x800, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000003480)={'gre0\x00', &(0x7f0000003400)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0020070080000001000001014a16002800660000802f907800000000640101018907c90000000000070ba4ac1414bbe000000100"]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000003540)={'syztnl1\x00', &(0x7f00000034c0)={'tunl0\x00', 0x0, 0x0, 0x700, 0x8a92, 0x9, {{0x18, 0x4, 0x2, 0x5, 0x60, 0x65, 0x0, 0x85, 0x2d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0xc, 0x41, 0x3, 0xc, [{@private=0xa010102, 0x3}]}, @rr={0x7, 0x13, 0xc1, [@multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}]}, @ssrr={0x89, 0x1b, 0xb3, [@empty, @empty, @remote, @loopback, @rand_addr=0x64010100, @multicast1]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x22, [@multicast2, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003600)={'syztnl0\x00', &(0x7f0000003580)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x2, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x1, 0x72f, 0x0, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003600)={'syztnl0\x00', &(0x7f0000003580)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x2, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x1, 0x72f, 0x0, 0x3}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000036c0)={0xffffffffffffffff, 0x58, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000037c0)={'syztnl1\x00', &(0x7f0000003700)={'sit0\x00', 0x0, 0x80, 0x1, 0x1, 0x1, {{0x26, 0x4, 0x2, 0x8, 0x98, 0x66, 0x0, 0x8, 0x4, 0x0, @multicast2, @private=0xa010101, {[@timestamp_addr={0x44, 0x2c, 0xb1, 0x1, 0x2, [{@rand_addr=0x64010100, 0x7}, {@multicast2, 0x1}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7fff}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x41, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x20}]}, @timestamp_addr={0x44, 0x24, 0xcf, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x13}, 0xb8f3}, {@private=0xa010101, 0x10001}, {@multicast2, 0x400}, {@remote, 0xfffffff9}]}, @timestamp={0x44, 0x24, 0x75, 0x0, 0x1, [0x5, 0x4, 0x8001, 0x59, 0x1ff, 0x5, 0x2a400000, 0xfffffffe]}]}}}}}) syz_open_dev$vcsu(&(0x7f0000003b00), 0x100000000, 0xa002) (async) r6 = syz_open_dev$vcsu(&(0x7f0000003b00), 0x100000000, 0xa002) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r7, 0x4b36) ioctl$HIDIOCGFIELDINFO(r7, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$HIDIOCGFIELDINFO(r7, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000140)) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r7}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r8, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r8, 0x0) (async) syz_open_pts(r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003c40)={0x1e, 0x5, &(0x7f0000003a40)=@raw=[@alu={0x7, 0x1, 0x4, 0x0, 0x0, 0xffffffffffffffc0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x2c}, @generic={0xff, 0x8, 0x5, 0x7fff, 0x1ff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}], &(0x7f0000003a80)='GPL\x00', 0x4, 0x32, &(0x7f0000003ac0)=""/50, 0x41000, 0xf, '\x00', 0x0, 0x11, r6, 0x8, &(0x7f0000003b40)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000003b80)={0x3, 0x3, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000003bc0)=[r8, 0x1], &(0x7f0000003c00)=[{0x4, 0x4, 0xf, 0x1}, {0x0, 0x1, 0xf, 0xa}, {0x1, 0x2, 0x0, 0x7}], 0x10, 0x3}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003c40)={0x1e, 0x5, &(0x7f0000003a40)=@raw=[@alu={0x7, 0x1, 0x4, 0x0, 0x0, 0xffffffffffffffc0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x2c}, @generic={0xff, 0x8, 0x5, 0x7fff, 0x1ff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}], &(0x7f0000003a80)='GPL\x00', 0x4, 0x32, &(0x7f0000003ac0)=""/50, 0x41000, 0xf, '\x00', 0x0, 0x11, r6, 0x8, &(0x7f0000003b40)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000003b80)={0x3, 0x3, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000003bc0)=[r8, 0x1], &(0x7f0000003c00)=[{0x4, 0x4, 0xf, 0x1}, {0x0, 0x1, 0xf, 0xa}, {0x1, 0x2, 0x0, 0x7}], 0x10, 0x3}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003800)={'vxcan0\x00', 0x0}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r10, 0x5416, 0x0) ioctl$PIO_FONTX(r10, 0x4b6c, &(0x7f0000003840)={0x1b1, 0x2, &(0x7f0000004180)="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"}) (async) ioctl$PIO_FONTX(r10, 0x4b6c, &(0x7f0000003840)={0x1b1, 0x2, &(0x7f0000004180)="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"}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000003a00)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000039c0)={&(0x7f0000004000)={0x150, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x150}}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003fc0)={r8, 0xe0, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003d00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000003d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003d80)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000003dc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000003e00), &(0x7f0000003e40), 0x8, 0x10, 0x8, 0x8, &(0x7f0000003e80)}}, 0x10) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:47:05 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) (async, rerun: 32) ioctl$KDSKBLED(r1, 0x4b65, 0x6) (rerun: 32) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x2002, r0}, 0x0) (async) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 09:47:05 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x401c5820, &(0x7f0000000e00)) [ 483.868726][ T3590] syz-executor.4[3590]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 09:47:05 executing program 3: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003380)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002300)=[{&(0x7f0000000080)=""/175, 0xaf}, {&(0x7f0000000140)=""/200, 0xc8}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/34, 0x22}, {&(0x7f0000001280)=""/21, 0x15}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/40, 0x28}], 0x7, &(0x7f0000002380)=""/4096, 0x1000}, 0x2000) r0 = socket(0x1a, 0x800, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000003480)={'gre0\x00', &(0x7f0000003400)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0020070080000001000001014a16002800660000802f907800000000640101018907c90000000000070ba4ac1414bbe000000100"]}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000003540)={'syztnl1\x00', &(0x7f00000034c0)={'tunl0\x00', 0x0, 0x0, 0x700, 0x8a92, 0x9, {{0x18, 0x4, 0x2, 0x5, 0x60, 0x65, 0x0, 0x85, 0x2d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0xc, 0x41, 0x3, 0xc, [{@private=0xa010102, 0x3}]}, @rr={0x7, 0x13, 0xc1, [@multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}]}, @ssrr={0x89, 0x1b, 0xb3, [@empty, @empty, @remote, @loopback, @rand_addr=0x64010100, @multicast1]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x22, [@multicast2, @private=0xa010102]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003600)={'syztnl0\x00', &(0x7f0000003580)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x2, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x1, 0x72f, 0x0, 0x3}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000036c0)={0xffffffffffffffff, 0x58, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000037c0)={'syztnl1\x00', &(0x7f0000003700)={'sit0\x00', 0x0, 0x80, 0x1, 0x1, 0x1, {{0x26, 0x4, 0x2, 0x8, 0x98, 0x66, 0x0, 0x8, 0x4, 0x0, @multicast2, @private=0xa010101, {[@timestamp_addr={0x44, 0x2c, 0xb1, 0x1, 0x2, [{@rand_addr=0x64010100, 0x7}, {@multicast2, 0x1}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7fff}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x41, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x20}]}, @timestamp_addr={0x44, 0x24, 0xcf, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x13}, 0xb8f3}, {@private=0xa010101, 0x10001}, {@multicast2, 0x400}, {@remote, 0xfffffff9}]}, @timestamp={0x44, 0x24, 0x75, 0x0, 0x1, [0x5, 0x4, 0x8001, 0x59, 0x1ff, 0x5, 0x2a400000, 0xfffffffe]}]}}}}}) (async) r6 = syz_open_dev$vcsu(&(0x7f0000003b00), 0x100000000, 0xa002) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r7, 0x4b36) ioctl$HIDIOCGFIELDINFO(r7, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000140)) (async, rerun: 32) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r7}, 0x8) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r8, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r8, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003c40)={0x1e, 0x5, &(0x7f0000003a40)=@raw=[@alu={0x7, 0x1, 0x4, 0x0, 0x0, 0xffffffffffffffc0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x2c}, @generic={0xff, 0x8, 0x5, 0x7fff, 0x1ff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}], &(0x7f0000003a80)='GPL\x00', 0x4, 0x32, &(0x7f0000003ac0)=""/50, 0x41000, 0xf, '\x00', 0x0, 0x11, r6, 0x8, &(0x7f0000003b40)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000003b80)={0x3, 0x3, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000003bc0)=[r8, 0x1], &(0x7f0000003c00)=[{0x4, 0x4, 0xf, 0x1}, {0x0, 0x1, 0xf, 0xa}, {0x1, 0x2, 0x0, 0x7}], 0x10, 0x3}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003800)={'vxcan0\x00', 0x0}) (async) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r10, 0x5416, 0x0) (async) ioctl$PIO_FONTX(r10, 0x4b6c, &(0x7f0000003840)={0x1b1, 0x2, &(0x7f0000004180)="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"}) (async, rerun: 64) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000003a00)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000039c0)={&(0x7f0000004000)={0x150, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x150}}, 0x40) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003fc0)={r8, 0xe0, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003d00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000003d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003d80)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000003dc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000003e00), &(0x7f0000003e40), 0x8, 0x10, 0x8, 0x8, &(0x7f0000003e80)}}, 0x10) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 09:47:05 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 09:47:05 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x6) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x2002, r0}, 0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r1, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x2002, r0}, 0x0) (async) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) 09:47:05 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r1, 0xdbeadd91291403) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r2, 0x5411, 0x0) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) recvmsg$can_j1939(r0, 0x0, 0x20) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000000)) memfd_create(&(0x7f00000000c0)='-\\\x00', 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r3, 0x5416, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x185) socket$can_j1939(0x1d, 0x2, 0x7) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_pts(r1, 0xdbeadd91291403) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCOUTQ(r2, 0x5411, 0x0) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) recvmsg$can_j1939(r0, 0x0, 0x20) (async) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000000)) (async) memfd_create(&(0x7f00000000c0)='-\\\x00', 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCMBIS(r3, 0x5416, 0x0) (async) ioctl$KDSKBLED(r3, 0x4b65, 0x185) (async) [ 483.983706][ T3599] FAULT_INJECTION: forcing a failure. [ 483.983706][ T3599] name failslab, interval 1, probability 0, space 0, times 0 [ 484.018739][ T3599] CPU: 0 PID: 3599 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 484.028963][ T3599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 484.039224][ T3599] Call Trace: [ 484.042622][ T3599] [ 484.045632][ T3599] dump_stack_lvl+0x125/0x1b0 [ 484.050549][ T3599] should_fail_ex+0x496/0x5b0 [ 484.055277][ T3599] should_failslab+0x9/0x20 [ 484.059827][ T3599] kmem_cache_alloc+0x61/0x400 [ 484.064627][ T3599] ? lock_acquire+0x464/0x510 [ 484.069361][ T3599] __kernfs_new_node+0xd3/0x8a0 [ 484.074256][ T3599] ? kernfs_add_one+0x3ca/0x510 [ 484.079150][ T3599] ? kernfs_path_from_node+0x60/0x60 [ 484.084490][ T3599] ? down_write+0x14f/0x200 [ 484.084526][ T3599] ? down_write+0x14f/0x200 [ 484.084553][ T3599] ? up_write+0x1b3/0x510 [ 484.084581][ T3599] kernfs_new_node+0x94/0x110 [ 484.084610][ T3599] __kernfs_create_file+0x53/0x340 [ 484.084642][ T3599] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 484.084679][ T3599] sysfs_merge_group+0x1b1/0x330 [ 484.084719][ T3599] ? sysfs_update_groups+0x30/0x30 [ 484.084753][ T3599] ? panel_show+0xf0/0xf0 [ 484.084784][ T3599] ? bus_to_subsys+0x129/0x160 [ 484.084808][ T3599] dpm_sysfs_add+0x22f/0x280 [ 484.084842][ T3599] device_add+0x9e7/0x1ac0 [ 484.084877][ T3599] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 484.084915][ T3599] ? lockdep_init_map_type+0x16d/0x7c0 [ 484.084947][ T3599] nfc_register_device+0x41/0x3c0 [ 484.084980][ T3599] nci_register_device+0x7f4/0xb80 [ 484.085008][ T3599] ? nci_init_complete_req+0x410/0x410 [ 484.085035][ T3599] ? lockdep_init_map_type+0x16d/0x7c0 [ 484.085068][ T3599] virtual_ncidev_open+0x147/0x220 09:47:06 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x6, 0x80000000, 0x8}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 484.085104][ T3599] ? virtual_ncidev_read+0x4e0/0x4e0 [ 484.085137][ T3599] misc_open+0x3da/0x4c0 [ 484.085163][ T3599] ? misc_devnode+0x120/0x120 [ 484.085189][ T3599] chrdev_open+0x277/0x700 [ 484.085213][ T3599] ? __unregister_chrdev+0x100/0x100 [ 484.085235][ T3599] ? fsnotify_perm.part.0+0x25d/0x630 [ 484.085266][ T3599] ? fsnotify_perm.part.0+0x268/0x630 [ 484.085296][ T3599] do_dentry_open+0x88b/0x1730 [ 484.085317][ T3599] ? __unregister_chrdev+0x100/0x100 [ 484.085338][ T3599] ? may_open+0x1f2/0x400 [ 484.085371][ T3599] path_openat+0x19af/0x29c0 [ 484.085393][ T3599] ? path_lookupat+0x770/0x770 [ 484.092897][ T3616] syz-executor.4[3616]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 484.094480][ T3599] do_filp_open+0x1de/0x430 [ 484.094512][ T3599] ? may_open_dev+0xf0/0xf0 [ 484.123172][ T3616] syz-executor.4[3616]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 484.124590][ T3599] ? expand_files+0x442/0x910 [ 484.124630][ T3599] ? _raw_spin_unlock+0x28/0x40 09:47:06 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x6, 0x80000000, 0x8}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:47:06 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r1, 0xdbeadd91291403) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r2, 0x5411, 0x0) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) recvmsg$can_j1939(r0, 0x0, 0x20) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000000)) memfd_create(&(0x7f00000000c0)='-\\\x00', 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r3, 0x5416, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x185) socket$can_j1939(0x1d, 0x2, 0x7) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_pts(r1, 0xdbeadd91291403) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCOUTQ(r2, 0x5411, 0x0) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)}, 0x10) (async) recvmsg$can_j1939(r0, 0x0, 0x20) (async) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000000)) (async) memfd_create(&(0x7f00000000c0)='-\\\x00', 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCMBIS(r3, 0x5416, 0x0) (async) ioctl$KDSKBLED(r3, 0x4b65, 0x185) (async) [ 484.272978][ T27] audit: type=1400 audit(1693734426.060:157): avc: denied { ioctl } for pid=3627 comm="syz-executor.5" path="/dev/vbi2" dev="devtmpfs" ino=882 ioctlcmd=0x5610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 484.275441][ T3599] ? alloc_fd+0x2da/0x6c0 [ 484.275478][ T3599] do_sys_openat2+0x176/0x1e0 [ 484.314755][ T3599] ? build_open_flags+0x690/0x690 [ 484.319827][ T3599] __x64_sys_openat+0x175/0x210 [ 484.324734][ T3599] ? __ia32_sys_open+0x1e0/0x1e0 [ 484.329713][ T3599] ? ksys_write+0x1a7/0x250 [ 484.334261][ T3599] ? rcu_is_watching+0x12/0xb0 [ 484.339064][ T3599] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 484.345109][ T3599] do_syscall_64+0x38/0xb0 [ 484.349580][ T3599] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 484.355521][ T3599] RIP: 0033:0x7fafba27cae9 [ 484.359974][ T3599] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 484.379785][ T3599] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 484.388230][ T3599] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 484.396224][ T3599] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 484.404482][ T3599] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 484.412494][ T3599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 484.420494][ T3599] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 484.428499][ T3599] 09:47:06 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 54) 09:47:06 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x6, 0x80000000, 0x8}) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:47:06 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000040)={0x1d2, "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"}) 09:47:06 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x4020940d, &(0x7f0000000e00)) [ 484.454158][ T3632] syz-executor.4[3632]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 09:47:06 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x7) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:47:06 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/215, 0xd7}, {&(0x7f00000001c0)=""/160, 0xa0}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/51, 0x33}, {&(0x7f0000000400)=""/24, 0x18}, {&(0x7f0000000440)=""/108, 0x6c}], 0x8, &(0x7f0000000540)=""/170, 0xaa}, 0x40) 09:47:06 executing program 5: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000140)=""/59) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x39cb}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3fb}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x80000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040857) 09:47:06 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x474b0000, &(0x7f0000000e00)) 09:47:06 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (rerun: 64) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000040)={0x1d2, "40d88bdb4e271dfd24b5664eb36df685178f5d3f63cae78a03d6fdb093d3c924665b879ef683546b9d74df353118e64711c5f3de42edfd0a46d1ce97e5bcf1f7fe4bd6e199a50ca5a3b1ec96661712ff8c1481b54aad12acce602a0126aba1b4b862d6adaf07aa4896a1966cd6829ab7697cf266ee65904b124f76e1bef157b31abbd6aac88a8a00712c4e234f23e2bbd7432bae4b98c863fd26315d581faf7360bb9f4cf86bdf171f9ca4b4eff4b98b4d627d253f49293713c0af603f4fa78007c85875101b8d1ba5064924f0f697b6801e37e5c69c98ffe35ea819b059db32f2cabab190bf6392c142be0f5b6e087d06f4bbf49cfd4cf1ca852b2a22ab718f6062df2c72d4090d539f7eeea876eda1014dedc89803113615ea68017cb1aa2a4fec520813adc99c8c006ee0b92d0d1d39953296592c12026eddefa4584efa910ba50dafde8d733b7e2c9065a38876816bf2112518a0c03fd305d7cafd070013993a6f3c3fab9e6fb87085aeb4abfcbad470528c7c1f0525972d52bbe753673e3339175416e6d55be3fb1f783ad0626367f8e085a3558a7c0273608dacd2f220a781901a7e3fa4f8ca17868c5456b282af3eb5e2c2ad7daa5c5d235e0046e384ef11ee075984ec62460decfe5874dfbe5032"}) 09:47:06 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/215, 0xd7}, {&(0x7f00000001c0)=""/160, 0xa0}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/51, 0x33}, {&(0x7f0000000400)=""/24, 0x18}, {&(0x7f0000000440)=""/108, 0x6c}], 0x8, &(0x7f0000000540)=""/170, 0xaa}, 0x40) 09:47:06 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) (rerun: 32) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x7) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:47:06 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000040)={0x1d2, "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"}) [ 484.699637][ T3662] FAULT_INJECTION: forcing a failure. [ 484.699637][ T3662] name failslab, interval 1, probability 0, space 0, times 0 [ 484.734751][ T3662] CPU: 0 PID: 3662 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 484.744814][ T3662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 484.754979][ T3662] Call Trace: [ 484.758283][ T3662] [ 484.761226][ T3662] dump_stack_lvl+0x125/0x1b0 [ 484.765950][ T3662] should_fail_ex+0x496/0x5b0 [ 484.770852][ T3662] should_failslab+0x9/0x20 [ 484.775403][ T3662] __kmem_cache_alloc_node+0x5f/0x470 [ 484.780814][ T3662] ? dev_uevent_filter+0xc0/0xc0 [ 484.785883][ T3662] kmalloc_trace+0x25/0xe0 [ 484.790337][ T3662] kobject_uevent_env+0x24c/0x1800 [ 484.795488][ T3662] ? bus_to_subsys+0x129/0x160 [ 484.800376][ T3662] device_add+0x1117/0x1ac0 [ 484.804926][ T3662] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 484.811826][ T3662] ? lockdep_init_map_type+0x16d/0x7c0 [ 484.817328][ T3662] nfc_register_device+0x41/0x3c0 [ 484.822404][ T3662] nci_register_device+0x7f4/0xb80 [ 484.827549][ T3662] ? nci_init_complete_req+0x410/0x410 [ 484.833042][ T3662] ? lockdep_init_map_type+0x16d/0x7c0 [ 484.838549][ T3662] virtual_ncidev_open+0x147/0x220 [ 484.843702][ T3662] ? virtual_ncidev_read+0x4e0/0x4e0 [ 484.849025][ T3662] misc_open+0x3da/0x4c0 [ 484.853301][ T3662] ? misc_devnode+0x120/0x120 [ 484.858005][ T3662] chrdev_open+0x277/0x700 [ 484.862458][ T3662] ? __unregister_chrdev+0x100/0x100 [ 484.867769][ T3662] ? fsnotify_perm.part.0+0x25d/0x630 [ 484.873175][ T3662] ? fsnotify_perm.part.0+0x268/0x630 [ 484.878580][ T3662] do_dentry_open+0x88b/0x1730 [ 484.883371][ T3662] ? __unregister_chrdev+0x100/0x100 [ 484.888690][ T3662] ? may_open+0x1f2/0x400 [ 484.893058][ T3662] path_openat+0x19af/0x29c0 [ 484.897693][ T3662] ? path_lookupat+0x770/0x770 [ 484.902502][ T3662] do_filp_open+0x1de/0x430 [ 484.907038][ T3662] ? may_open_dev+0xf0/0xf0 [ 484.911573][ T3662] ? expand_files+0x442/0x910 [ 484.916291][ T3662] ? _raw_spin_unlock+0x28/0x40 [ 484.921178][ T3662] ? alloc_fd+0x2da/0x6c0 [ 484.925547][ T3662] do_sys_openat2+0x176/0x1e0 [ 484.930255][ T3662] ? build_open_flags+0x690/0x690 [ 484.935317][ T3662] __x64_sys_openat+0x175/0x210 [ 484.940200][ T3662] ? __ia32_sys_open+0x1e0/0x1e0 [ 484.945177][ T3662] ? ksys_write+0x1a7/0x250 [ 484.949719][ T3662] ? rcu_is_watching+0x12/0xb0 [ 484.954513][ T3662] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 484.960528][ T3662] do_syscall_64+0x38/0xb0 [ 484.964988][ T3662] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 484.970924][ T3662] RIP: 0033:0x7fafba27cae9 [ 484.975359][ T3662] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 484.995018][ T3662] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 485.003461][ T3662] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 485.011455][ T3662] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 485.019458][ T3662] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 485.027455][ T3662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.035454][ T3662] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 485.043454][ T3662] 09:47:06 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 55) 09:47:06 executing program 5: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000140)=""/59) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x39cb}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3fb}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x80000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040857) 09:47:06 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/215, 0xd7}, {&(0x7f00000001c0)=""/160, 0xa0}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/51, 0x33}, {&(0x7f0000000400)=""/24, 0x18}, {&(0x7f0000000440)=""/108, 0x6c}], 0x8, &(0x7f0000000540)=""/170, 0xaa}, 0x40) 09:47:06 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x4, 0x3ff, 0x100, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0xb}, 0x48) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x39eec3e4, 0xfffffff9, 0x0, 0xb4, 0x17, "894671ea711b6783ce9b71d1cc78a3dea7179b"}) read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a) 09:47:06 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x494b0000, &(0x7f0000000e00)) 09:47:06 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x4, 0x3ff, 0x100, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0xb}, 0x48) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x39eec3e4, 0xfffffff9, 0x0, 0xb4, 0x17, "894671ea711b6783ce9b71d1cc78a3dea7179b"}) read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x4, 0x3ff, 0x100, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0xb}, 0x48) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x39eec3e4, 0xfffffff9, 0x0, 0xb4, 0x17, "894671ea711b6783ce9b71d1cc78a3dea7179b"}) (async) read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a) (async) 09:47:06 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) times(&(0x7f0000000000)) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000040)={0xa, 0x40, 0x401, 0x3, 0x1000}) 09:47:07 executing program 5: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000140)=""/59) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x39cb}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3fb}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x80000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040857) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x39cb}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3fb}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x80000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040857) 09:47:07 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) times(&(0x7f0000000000)) (async) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000040)={0xa, 0x40, 0x401, 0x3, 0x1000}) 09:47:07 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x4, 0x3ff, 0x100, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0xb}, 0x48) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x39eec3e4, 0xfffffff9, 0x0, 0xb4, 0x17, "894671ea711b6783ce9b71d1cc78a3dea7179b"}) (async) read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a) [ 485.374804][ T3697] FAULT_INJECTION: forcing a failure. [ 485.374804][ T3697] name failslab, interval 1, probability 0, space 0, times 0 [ 485.398220][ T3697] CPU: 0 PID: 3697 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 485.408275][ T3697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 485.418355][ T3697] Call Trace: [ 485.421655][ T3697] [ 485.424603][ T3697] dump_stack_lvl+0x125/0x1b0 [ 485.429586][ T3697] should_fail_ex+0x496/0x5b0 [ 485.434307][ T3697] should_failslab+0x9/0x20 [ 485.438938][ T3697] __kmem_cache_alloc_node+0x5f/0x470 [ 485.444357][ T3697] ? kobject_get_path+0xce/0x2b0 [ 485.449349][ T3697] __kmalloc+0x4f/0x100 [ 485.453549][ T3697] kobject_get_path+0xce/0x2b0 [ 485.459145][ T3697] kobject_uevent_env+0x26b/0x1800 [ 485.464295][ T3697] ? bus_to_subsys+0x129/0x160 [ 485.469098][ T3697] device_add+0x1117/0x1ac0 [ 485.473650][ T3697] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 485.480552][ T3697] ? lockdep_init_map_type+0x16d/0x7c0 [ 485.486057][ T3697] nfc_register_device+0x41/0x3c0 [ 485.491128][ T3697] nci_register_device+0x7f4/0xb80 [ 485.496281][ T3697] ? nci_init_complete_req+0x410/0x410 [ 485.501777][ T3697] ? lockdep_init_map_type+0x16d/0x7c0 [ 485.507374][ T3697] virtual_ncidev_open+0x147/0x220 [ 485.512713][ T3697] ? virtual_ncidev_read+0x4e0/0x4e0 [ 485.518048][ T3697] misc_open+0x3da/0x4c0 [ 485.522323][ T3697] ? misc_devnode+0x120/0x120 [ 485.527091][ T3697] chrdev_open+0x277/0x700 [ 485.531593][ T3697] ? __unregister_chrdev+0x100/0x100 [ 485.536961][ T3697] ? fsnotify_perm.part.0+0x25d/0x630 [ 485.542336][ T3697] ? fsnotify_perm.part.0+0x268/0x630 [ 485.547885][ T3697] do_dentry_open+0x88b/0x1730 [ 485.552735][ T3697] ? __unregister_chrdev+0x100/0x100 [ 485.558017][ T3697] ? may_open+0x1f2/0x400 [ 485.562341][ T3697] path_openat+0x19af/0x29c0 [ 485.566920][ T3697] ? path_lookupat+0x770/0x770 [ 485.571697][ T3697] do_filp_open+0x1de/0x430 [ 485.576196][ T3697] ? may_open_dev+0xf0/0xf0 [ 485.580697][ T3697] ? expand_files+0x442/0x910 [ 485.585472][ T3697] ? _raw_spin_unlock+0x28/0x40 [ 485.590343][ T3697] ? alloc_fd+0x2da/0x6c0 [ 485.594681][ T3697] do_sys_openat2+0x176/0x1e0 [ 485.599351][ T3697] ? build_open_flags+0x690/0x690 [ 485.604365][ T3697] __x64_sys_openat+0x175/0x210 [ 485.609220][ T3697] ? __ia32_sys_open+0x1e0/0x1e0 [ 485.614178][ T3697] ? ksys_write+0x1a7/0x250 [ 485.618720][ T3697] ? rcu_is_watching+0x12/0xb0 [ 485.623513][ T3697] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 485.629567][ T3697] do_syscall_64+0x38/0xb0 [ 485.634000][ T3697] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 485.639918][ T3697] RIP: 0033:0x7fafba27cae9 [ 485.644341][ T3697] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 485.664126][ T3697] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 485.672544][ T3697] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 485.680774][ T3697] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 485.688761][ T3697] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 485.696835][ T3697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.704799][ T3697] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 485.712761][ T3697] 09:47:07 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x7) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e00)) 09:47:07 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x2a) 09:47:07 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/2168]) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x6, 0x52, 0x6, 0x8000, 0x18, "95a126e3491c43d8"}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x68, 0x90001) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f00000000c0)={0x627, "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"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000940)="0811b5f7c19c8836dd0fca4cdbaccf341469778373fc9fa61eeb596df8e28dfe83661f723e207768f39ba5cf121a41bf7595e5e878d9ae70307acc64510641305d4f00995c1fef0ab0ceca20f158863a423d971fd61cfee1910b0b0cf8729b172b80edaa13b58871c8e1071f25a8c4339cf2bcfec520b495e93c91e3c7732cbebde90fb868d720ed2180b9a7368a67fbec0de73894fde3c00688e3a155628382dbebf8af99749df46262e55a7f34caccb83be6cbca35e3fc66ad9113ef38a95dc0b775e0c51f9903c863e9d5aa19") 09:47:07 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) times(&(0x7f0000000000)) (async) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000040)={0xa, 0x40, 0x401, 0x3, 0x1000}) 09:47:07 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x50540000, &(0x7f0000000e00)) 09:47:07 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 56) 09:47:07 executing program 4: sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x4, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xafc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x50}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x10}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x48}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x80}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) 09:47:07 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x2a) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x2a) (async) 09:47:07 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/2168]) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x6, 0x52, 0x6, 0x8000, 0x18, "95a126e3491c43d8"}) (async) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) (async) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x68, 0x90001) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f00000000c0)={0x627, "726e3e4f92d2943eb2a98b64833a5a13ef7248a1baa5960520b416ae857a50166a9067bffd15cae303be6d3831cf656f7d1c12be08f4ad729bb47fecc12d5490b85f1615f24983193891a1902d6fa45c64e61693ba5b9c6dbf98205d0cd73d52a26f88be95c0568b7d78d9fffed72844c07f44588e3cfba10f7141baa6f02c4049f1340086701afe6f567beb052a15f5981560af302dcf489cf0d935a868c4510aab42b13988366c58be7d122120a781bef298f689a26d2f274a36b57a2ac97ace55cef61115e89d5134f6665b4547cf16f27c0b311bdf7ac42180553bc1412056aab896fb993835cd4478f5ada53121ef241afcc26dc79e71de01668caf2b78aabff4635adb9ab5241ef839c62f828ffc1c04e5c73829bf8878942961d3f5be39e82f41ac259d4df6c9a8addd9e816af681e720a74d6f30b20ccf2230f36beda65a2cdd0be3a07ca6af1df66f3529f337d74b7083eb2c1018bcf8c0036b901cc55782bb63cc76de2c352e064685b0ebc3d3ea5522e7c797bcdac7d9985af7174f714d0f79809481dc52aed8da7c0d2a22dafd3f0c7fe3b5169ad6699519e09d6661f767cf55d6937c38e296336e8879e6f4e8d39400fb632b16a78dca8af7c76fe073519ec02cd52a13581dee0f28ac3ad5deb19766776b1f2c1fee16f5bae5c478556166b050aa477c5c662106f6241dbd574aaaead1e2928efbeed572c5cb24b88704d16d876794433c5de705fde732c665a88cfaaba8f1d32b4e74728d6790bded6a064ddb80c1e093836c4028bdfe890d9009dae4e114a4167f59e423b6aa79149d5ac6c76944e416ed6378d6fed121036b8c4fa0fef2a13365dd61329c627526dd421729debaa3207bfb5e7f808f0df93c61f9d1979243e3b381969c1b7b2a92e76aedcaca562913f9a8fdc975336230550426f22f365c3e70062e0dc58a38eff08990981c47b72b03d93a7544837df4b2c36cc3962c9d96ef6d70c02ae96fb27e94ea8c78db0416a564f2cfb847b439018d99613c466bcefe0e1a50729e6ed56422b165e6c19b1725192bea52fb2428868f36f9ec9a21b104cee65701d0606e91d2e1572aa010a01d0e7df484bdbdaf11a63e9caeb1caf8b788b080cb3c00bd76bd7498fcdce7398793bc42a45a0cc81f86e6c8a0a14135ce44ae617f67b62009294110b1268d99c3258a0513dac575d60b22643947464ba39d8ff181bdc6855e462704c51debdaf9955ff02eb8675bed166cd7b2564ecc814ff01cb868be4ea562fe47c8613af1c1510201929d634b3935d91d7dd7254b44ed14ea6fd05f3f3b39a4a399df5352aea52f22449dd5a973dcb5a1b0d83f782f6f69563b9b0639587e3a4af0cb5aa4dc751e5c83fdd3c4d5655b824852a3deaeff5b091e2995c4b382221b3e8ff444a97b1b45724c9caee2e305677b819805ad3ef9c851b3f28cf8db66ca75257db8e47357603df5b9340391cd448241479d6ba706446465310e4dd1d313c6c209e8e6c7b15dbaa01ab254dd34e0b829fcd64f7d4da1071daf6e2fd0d690101cfea857d43bd37e3dbf01caf4fa24a240217b6f36ea552acc61c947439289f97c84a432a99a762448226e1159f1cff69849394f6c23c780eba6d1613bf2ed9892e9d239c278ae1a42764e588046e05b6d77ba4aa575b8ab0cb100a500fc436261ed13afbcc412bb91d4cbcc8ad9a3963a12b92f10d7cc84bac3b2eb8a06935b54f8bb738eeee9e54895429a5250d2dc33af0e25721139d8ae90ba2ec32f26d872669c87abc9d13d8059eac8da7451519ace644ad889e1d0ab3c8d37727c21ae33ac9cdee7b43d4ccea8a450649ffdf612bb6d2655338149ada837c8ed1e461f8757ed015e76be8c189e339be733105a329108f6011723fc29767fd406421aa2534021ef7a67a09c2c4635fd65c9c22a31ce03773d2b3ca4deab50d3ab4b24c4b3e13f8aec2a6f13e77b736f85df413bc3753c2de32966b32505992b86f1eeabddd1d0cd0bafc7218cb4c5584703928fdac8b816e823f716d1627f779a90f806e9073be0d5ab89927182880bc864368ba9ad91b13eae46d082173211f38f9ec081150c4e8f010584eb16b0c95862b8eaaa207a0a64aaa751a4973aa4999919331725705f2774a3d73bf9caf008e1acfdfebdaa8a9b9539a19dc095246d7d0e30a5ed7d097afacd7ea554af69ec132dfaeeabdc0b473defd9520700238bae8f"}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000940)="0811b5f7c19c8836dd0fca4cdbaccf341469778373fc9fa61eeb596df8e28dfe83661f723e207768f39ba5cf121a41bf7595e5e878d9ae70307acc64510641305d4f00995c1fef0ab0ceca20f158863a423d971fd61cfee1910b0b0cf8729b172b80edaa13b58871c8e1071f25a8c4339cf2bcfec520b495e93c91e3c7732cbebde90fb868d720ed2180b9a7368a67fbec0de73894fde3c00688e3a155628382dbebf8af99749df46262e55a7f34caccb83be6cbca35e3fc66ad9113ef38a95dc0b775e0c51f9903c863e9d5aa19") 09:47:07 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x2a) 09:47:07 executing program 4: sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x4, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xafc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x50}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x10}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x48}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x80}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) 09:47:07 executing program 5: ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)={0x5, 0x80000001}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 485.756331][ T3672] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR [ 485.925800][ T3744] FAULT_INJECTION: forcing a failure. [ 485.925800][ T3744] name failslab, interval 1, probability 0, space 0, times 0 [ 485.979604][ T3744] CPU: 0 PID: 3744 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 485.989645][ T3744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 485.999900][ T3744] Call Trace: [ 486.003202][ T3744] [ 486.006169][ T3744] dump_stack_lvl+0x125/0x1b0 [ 486.010907][ T3744] should_fail_ex+0x496/0x5b0 [ 486.015727][ T3744] should_failslab+0x9/0x20 [ 486.020279][ T3744] kmem_cache_alloc_node+0x64/0x540 [ 486.025519][ T3744] __alloc_skb+0x287/0x330 [ 486.030135][ T3744] ? __napi_build_skb+0x50/0x50 [ 486.034991][ T3744] ? reacquire_held_locks+0x4b0/0x4b0 [ 486.040374][ T3744] ? __kmalloc+0xe5/0x100 [ 486.044738][ T3744] alloc_uevent_skb+0x7d/0x210 [ 486.049589][ T3744] kobject_uevent_env+0xc20/0x1800 [ 486.054717][ T3744] ? bus_to_subsys+0x129/0x160 [ 486.059498][ T3744] device_add+0x1117/0x1ac0 [ 486.064034][ T3744] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 486.070927][ T3744] ? lockdep_init_map_type+0x16d/0x7c0 [ 486.076485][ T3744] nfc_register_device+0x41/0x3c0 [ 486.081529][ T3744] nci_register_device+0x7f4/0xb80 [ 486.086640][ T3744] ? nci_init_complete_req+0x410/0x410 [ 486.092095][ T3744] ? lockdep_init_map_type+0x16d/0x7c0 [ 486.097655][ T3744] virtual_ncidev_open+0x147/0x220 [ 486.102843][ T3744] ? virtual_ncidev_read+0x4e0/0x4e0 [ 486.108150][ T3744] misc_open+0x3da/0x4c0 [ 486.112400][ T3744] ? misc_devnode+0x120/0x120 [ 486.117081][ T3744] chrdev_open+0x277/0x700 [ 486.121511][ T3744] ? __unregister_chrdev+0x100/0x100 [ 486.126809][ T3744] ? fsnotify_perm.part.0+0x25d/0x630 [ 486.132184][ T3744] ? fsnotify_perm.part.0+0x268/0x630 [ 486.137653][ T3744] do_dentry_open+0x88b/0x1730 [ 486.142413][ T3744] ? __unregister_chrdev+0x100/0x100 [ 486.147701][ T3744] ? may_open+0x1f2/0x400 [ 486.152048][ T3744] path_openat+0x19af/0x29c0 [ 486.156631][ T3744] ? path_lookupat+0x770/0x770 [ 486.161403][ T3744] do_filp_open+0x1de/0x430 [ 486.165900][ T3744] ? may_open_dev+0xf0/0xf0 [ 486.170394][ T3744] ? expand_files+0x442/0x910 [ 486.175160][ T3744] ? _raw_spin_unlock+0x28/0x40 [ 486.180095][ T3744] ? alloc_fd+0x2da/0x6c0 [ 486.184423][ T3744] do_sys_openat2+0x176/0x1e0 [ 486.189095][ T3744] ? build_open_flags+0x690/0x690 [ 486.194122][ T3744] __x64_sys_openat+0x175/0x210 [ 486.198974][ T3744] ? __ia32_sys_open+0x1e0/0x1e0 [ 486.203920][ T3744] ? ksys_write+0x1a7/0x250 [ 486.208447][ T3744] ? rcu_is_watching+0x12/0xb0 [ 486.213213][ T3744] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 486.219210][ T3744] do_syscall_64+0x38/0xb0 [ 486.223634][ T3744] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.229639][ T3744] RIP: 0033:0x7fafba27cae9 [ 486.234088][ T3744] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 486.253708][ T3744] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 486.262227][ T3744] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 486.270200][ T3744] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 486.278255][ T3744] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 486.286228][ T3744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 486.294380][ T3744] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 486.302466][ T3744] 09:47:08 executing program 5: ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)={0x5, 0x80000001}) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:47:08 executing program 4: sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x4, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xafc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x50}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x10}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x48}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x80}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) 09:47:08 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/2168]) (async) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x6, 0x52, 0x6, 0x8000, 0x18, "95a126e3491c43d8"}) (async) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) (async) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x68, 0x90001) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f00000000c0)={0x627, "726e3e4f92d2943eb2a98b64833a5a13ef7248a1baa5960520b416ae857a50166a9067bffd15cae303be6d3831cf656f7d1c12be08f4ad729bb47fecc12d5490b85f1615f24983193891a1902d6fa45c64e61693ba5b9c6dbf98205d0cd73d52a26f88be95c0568b7d78d9fffed72844c07f44588e3cfba10f7141baa6f02c4049f1340086701afe6f567beb052a15f5981560af302dcf489cf0d935a868c4510aab42b13988366c58be7d122120a781bef298f689a26d2f274a36b57a2ac97ace55cef61115e89d5134f6665b4547cf16f27c0b311bdf7ac42180553bc1412056aab896fb993835cd4478f5ada53121ef241afcc26dc79e71de01668caf2b78aabff4635adb9ab5241ef839c62f828ffc1c04e5c73829bf8878942961d3f5be39e82f41ac259d4df6c9a8addd9e816af681e720a74d6f30b20ccf2230f36beda65a2cdd0be3a07ca6af1df66f3529f337d74b7083eb2c1018bcf8c0036b901cc55782bb63cc76de2c352e064685b0ebc3d3ea5522e7c797bcdac7d9985af7174f714d0f79809481dc52aed8da7c0d2a22dafd3f0c7fe3b5169ad6699519e09d6661f767cf55d6937c38e296336e8879e6f4e8d39400fb632b16a78dca8af7c76fe073519ec02cd52a13581dee0f28ac3ad5deb19766776b1f2c1fee16f5bae5c478556166b050aa477c5c662106f6241dbd574aaaead1e2928efbeed572c5cb24b88704d16d876794433c5de705fde732c665a88cfaaba8f1d32b4e74728d6790bded6a064ddb80c1e093836c4028bdfe890d9009dae4e114a4167f59e423b6aa79149d5ac6c76944e416ed6378d6fed121036b8c4fa0fef2a13365dd61329c627526dd421729debaa3207bfb5e7f808f0df93c61f9d1979243e3b381969c1b7b2a92e76aedcaca562913f9a8fdc975336230550426f22f365c3e70062e0dc58a38eff08990981c47b72b03d93a7544837df4b2c36cc3962c9d96ef6d70c02ae96fb27e94ea8c78db0416a564f2cfb847b439018d99613c466bcefe0e1a50729e6ed56422b165e6c19b1725192bea52fb2428868f36f9ec9a21b104cee65701d0606e91d2e1572aa010a01d0e7df484bdbdaf11a63e9caeb1caf8b788b080cb3c00bd76bd7498fcdce7398793bc42a45a0cc81f86e6c8a0a14135ce44ae617f67b62009294110b1268d99c3258a0513dac575d60b22643947464ba39d8ff181bdc6855e462704c51debdaf9955ff02eb8675bed166cd7b2564ecc814ff01cb868be4ea562fe47c8613af1c1510201929d634b3935d91d7dd7254b44ed14ea6fd05f3f3b39a4a399df5352aea52f22449dd5a973dcb5a1b0d83f782f6f69563b9b0639587e3a4af0cb5aa4dc751e5c83fdd3c4d5655b824852a3deaeff5b091e2995c4b382221b3e8ff444a97b1b45724c9caee2e305677b819805ad3ef9c851b3f28cf8db66ca75257db8e47357603df5b9340391cd448241479d6ba706446465310e4dd1d313c6c209e8e6c7b15dbaa01ab254dd34e0b829fcd64f7d4da1071daf6e2fd0d690101cfea857d43bd37e3dbf01caf4fa24a240217b6f36ea552acc61c947439289f97c84a432a99a762448226e1159f1cff69849394f6c23c780eba6d1613bf2ed9892e9d239c278ae1a42764e588046e05b6d77ba4aa575b8ab0cb100a500fc436261ed13afbcc412bb91d4cbcc8ad9a3963a12b92f10d7cc84bac3b2eb8a06935b54f8bb738eeee9e54895429a5250d2dc33af0e25721139d8ae90ba2ec32f26d872669c87abc9d13d8059eac8da7451519ace644ad889e1d0ab3c8d37727c21ae33ac9cdee7b43d4ccea8a450649ffdf612bb6d2655338149ada837c8ed1e461f8757ed015e76be8c189e339be733105a329108f6011723fc29767fd406421aa2534021ef7a67a09c2c4635fd65c9c22a31ce03773d2b3ca4deab50d3ab4b24c4b3e13f8aec2a6f13e77b736f85df413bc3753c2de32966b32505992b86f1eeabddd1d0cd0bafc7218cb4c5584703928fdac8b816e823f716d1627f779a90f806e9073be0d5ab89927182880bc864368ba9ad91b13eae46d082173211f38f9ec081150c4e8f010584eb16b0c95862b8eaaa207a0a64aaa751a4973aa4999919331725705f2774a3d73bf9caf008e1acfdfebdaa8a9b9539a19dc095246d7d0e30a5ed7d097afacd7ea554af69ec132dfaeeabdc0b473defd9520700238bae8f"}) (async) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000940)="0811b5f7c19c8836dd0fca4cdbaccf341469778373fc9fa61eeb596df8e28dfe83661f723e207768f39ba5cf121a41bf7595e5e878d9ae70307acc64510641305d4f00995c1fef0ab0ceca20f158863a423d971fd61cfee1910b0b0cf8729b172b80edaa13b58871c8e1071f25a8c4339cf2bcfec520b495e93c91e3c7732cbebde90fb868d720ed2180b9a7368a67fbec0de73894fde3c00688e3a155628382dbebf8af99749df46262e55a7f34caccb83be6cbca35e3fc66ad9113ef38a95dc0b775e0c51f9903c863e9d5aa19") 09:47:08 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x51540000, &(0x7f0000000e00)) 09:47:08 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000100)) 09:47:08 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 57) 09:47:08 executing program 5: ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)={0x5, 0x80000001}) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:47:08 executing program 4: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24b92abd7000fcdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="fbff0300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x2040}, 0x24008090) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getaddr={0x30, 0x16, 0x4, 0x70bd29, 0x25dfdbfb, {0xa, 0x80, 0x40, 0xc8, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_FLAGS={0x8, 0x8, 0x120}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004000}, 0x40005) r3 = socket(0x1a, 0x1, 0xffffff80) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x24000885}, 0x4044) recvmsg$can_j1939(r0, 0x0, 0x0) 09:47:08 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x52540000, &(0x7f0000000e00)) 09:47:08 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000aa, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000000)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r1, 0x0) accept4$phonet_pipe(r1, 0x0, 0x0, 0x800) 09:47:08 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x6) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xffffffffffffff63) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0xbc580) read$hidraw(r3, 0x0, 0x0) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x2, 0xff, 0x1}, 0x2}, 0x18) [ 486.548413][ T3782] FAULT_INJECTION: forcing a failure. [ 486.548413][ T3782] name failslab, interval 1, probability 0, space 0, times 0 [ 486.570600][ T27] audit: type=1400 audit(1693734428.360:158): avc: denied { ioctl } for pid=3785 comm="syz-executor.4" path="socket:[82421]" dev="sockfs" ino=82421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 09:47:08 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000aa, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000000)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r1, 0x0) accept4$phonet_pipe(r1, 0x0, 0x0, 0x800) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000aa, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000000)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r1, 0x0) (async) accept4$phonet_pipe(r1, 0x0, 0x0, 0x800) (async) 09:47:08 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x6) (async) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xffffffffffffff63) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0xbc580) read$hidraw(r3, 0x0, 0x0) (async) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x2, 0xff, 0x1}, 0x2}, 0x18) [ 486.580700][ T3782] CPU: 0 PID: 3782 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 486.607131][ T3782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 486.617997][ T3782] Call Trace: [ 486.621357][ T3782] [ 486.624311][ T3782] dump_stack_lvl+0x125/0x1b0 [ 486.629113][ T3782] should_fail_ex+0x496/0x5b0 [ 486.633916][ T3782] should_failslab+0x9/0x20 [ 486.638637][ T3782] kmem_cache_alloc+0x61/0x400 [ 486.643446][ T3782] skb_clone+0x171/0x3c0 09:47:08 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x6) (async) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x6) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xffffffffffffff63) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0xbc580) read$hidraw(r3, 0x0, 0x0) (async) read$hidraw(r3, 0x0, 0x0) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x2, 0xff, 0x1}, 0x2}, 0x18) [ 486.647805][ T3782] netlink_broadcast_filtered+0xaf9/0xf00 [ 486.653777][ T3782] ? sprintf+0xcd/0x100 [ 486.658020][ T3782] ? netlink_connect+0x550/0x550 [ 486.663182][ T3782] ? __kmalloc+0xe5/0x100 [ 486.667552][ T3782] netlink_broadcast+0x39/0x50 [ 486.672432][ T3782] kobject_uevent_env+0xbd2/0x1800 [ 486.677583][ T3782] ? bus_to_subsys+0x129/0x160 [ 486.682379][ T3782] device_add+0x1117/0x1ac0 [ 486.687193][ T3782] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 09:47:08 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000aa, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000000)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r1, 0x0) (async) accept4$phonet_pipe(r1, 0x0, 0x0, 0x800) [ 486.694085][ T3782] ? lockdep_init_map_type+0x16d/0x7c0 [ 486.699584][ T3782] nfc_register_device+0x41/0x3c0 [ 486.704654][ T3782] nci_register_device+0x7f4/0xb80 [ 486.709819][ T3782] ? nci_init_complete_req+0x410/0x410 [ 486.715312][ T3782] ? lockdep_init_map_type+0x16d/0x7c0 [ 486.720987][ T3782] virtual_ncidev_open+0x147/0x220 [ 486.726147][ T3782] ? virtual_ncidev_read+0x4e0/0x4e0 [ 486.731479][ T3782] misc_open+0x3da/0x4c0 [ 486.735756][ T3782] ? misc_devnode+0x120/0x120 [ 486.740468][ T3782] chrdev_open+0x277/0x700 09:47:08 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x0) r0 = socket(0x5, 0x2, 0x80) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, 0x1, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xb0, 0x6, "4e36fab1996f9b28eb88cc58f26d7a868eeaac3daa370338cfa54bf154e1b78af80c60f92bdb32ffd2f79be150dbfe90cf6b8c0842e7d347165b08ecf493d7862ec52b7afe5d167cb248d36b64b70b00b1229954f28061a9c330b9c6b27ee3343597d446352e48318614a1988a800fb2cff5d65a2643715bf764bbb673e78d3785782e05e956798ae873f43aae88ada0b5084a63920661c80febc53aa857859a804fe73bf2c3a023cdf6cd0b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x9, 0x6, "a0e1f212ca"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000040}, 0x1004c040) [ 486.744973][ T3782] ? __unregister_chrdev+0x100/0x100 [ 486.750295][ T3782] ? fsnotify_perm.part.0+0x25d/0x630 [ 486.755706][ T3782] ? fsnotify_perm.part.0+0x268/0x630 [ 486.761213][ T3782] do_dentry_open+0x88b/0x1730 [ 486.766032][ T3782] ? __unregister_chrdev+0x100/0x100 [ 486.771454][ T3782] ? may_open+0x1f2/0x400 [ 486.776009][ T3782] path_openat+0x19af/0x29c0 [ 486.780637][ T3782] ? path_lookupat+0x770/0x770 [ 486.785451][ T3782] do_filp_open+0x1de/0x430 [ 486.786735][ T27] audit: type=1400 audit(1693734428.580:159): avc: denied { create } for pid=3810 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 486.789971][ T3782] ? may_open_dev+0xf0/0xf0 [ 486.790000][ T3782] ? expand_files+0x442/0x910 [ 486.819489][ T3782] ? _raw_spin_unlock+0x28/0x40 [ 486.824380][ T3782] ? alloc_fd+0x2da/0x6c0 [ 486.828889][ T3782] do_sys_openat2+0x176/0x1e0 [ 486.833603][ T3782] ? build_open_flags+0x690/0x690 [ 486.838664][ T3782] __x64_sys_openat+0x175/0x210 [ 486.843550][ T3782] ? __ia32_sys_open+0x1e0/0x1e0 [ 486.848530][ T3782] ? ksys_write+0x1a7/0x250 [ 486.853069][ T3782] ? rcu_is_watching+0x12/0xb0 [ 486.857864][ T3782] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 486.863874][ T3782] do_syscall_64+0x38/0xb0 [ 486.868333][ T3782] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.874360][ T3782] RIP: 0033:0x7fafba27cae9 [ 486.878809][ T3782] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 486.898432][ T3782] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 486.906857][ T3782] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 486.914875][ T3782] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 486.922855][ T3782] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 486.930833][ T3782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 486.939323][ T3782] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 486.947386][ T3782] 09:47:08 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000100)) 09:47:08 executing program 3: ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="50d0d2b4a5a572d6e6d5b086ce77164456452a8de06f0fd79b69195d799dd8ab2f3106c9fb22c0bd93900946c88dfc9036664f81942c0e83b29aacede952e3d1cd83") read$hidraw(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x3, 0x1f, 0x9, 0x7, 0x2, "ef4964d5d8ca5243"}) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000700000008f661f512e3e0a70000000001060101fffbffff0a05000100070000000500010007000000050001000700000005000100fc192da4050026b4e1143b76b4bb90ddb0363d6e78324fccf2dd04a2d6e347ebd245c8e1db2799fe4b55427e31"], 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x48804) 09:47:08 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x0) socket(0x5, 0x2, 0x80) (async) r0 = socket(0x5, 0x2, 0x80) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, 0x1, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xb0, 0x6, "4e36fab1996f9b28eb88cc58f26d7a868eeaac3daa370338cfa54bf154e1b78af80c60f92bdb32ffd2f79be150dbfe90cf6b8c0842e7d347165b08ecf493d7862ec52b7afe5d167cb248d36b64b70b00b1229954f28061a9c330b9c6b27ee3343597d446352e48318614a1988a800fb2cff5d65a2643715bf764bbb673e78d3785782e05e956798ae873f43aae88ada0b5084a63920661c80febc53aa857859a804fe73bf2c3a023cdf6cd0b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x9, 0x6, "a0e1f212ca"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000040}, 0x1004c040) 09:47:08 executing program 4: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24b92abd7000fcdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="fbff0300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x2040}, 0x24008090) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, r1) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, 0x0}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getaddr={0x30, 0x16, 0x4, 0x70bd29, 0x25dfdbfb, {0xa, 0x80, 0x40, 0xc8, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_FLAGS={0x8, 0x8, 0x120}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004000}, 0x40005) (async) r3 = socket(0x1a, 0x1, 0xffffff80) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x24000885}, 0x4044) (async) recvmsg$can_j1939(r0, 0x0, 0x0) 09:47:08 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x60540000, &(0x7f0000000e00)) 09:47:08 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 58) 09:47:08 executing program 4: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24b92abd7000fcdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="fbff0300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x2040}, 0x24008090) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, r1) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, 0x0}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getaddr={0x30, 0x16, 0x4, 0x70bd29, 0x25dfdbfb, {0xa, 0x80, 0x40, 0xc8, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_FLAGS={0x8, 0x8, 0x120}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004000}, 0x40005) r3 = socket(0x1a, 0x1, 0xffffff80) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x24000885}, 0x4044) (async) recvmsg$can_j1939(r0, 0x0, 0x0) 09:47:08 executing program 3: ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="50d0d2b4a5a572d6e6d5b086ce77164456452a8de06f0fd79b69195d799dd8ab2f3106c9fb22c0bd93900946c88dfc9036664f81942c0e83b29aacede952e3d1cd83") (async, rerun: 32) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x3, 0x1f, 0x9, 0x7, 0x2, "ef4964d5d8ca5243"}) (async) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000700000008f661f512e3e0a70000000001060101fffbffff0a05000100070000000500010007000000050001000700000005000100fc192da4050026b4e1143b76b4bb90ddb0363d6e78324fccf2dd04a2d6e347ebd245c8e1db2799fe4b55427e31"], 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x48804) [ 487.157724][ T3837] FAULT_INJECTION: forcing a failure. [ 487.157724][ T3837] name failslab, interval 1, probability 0, space 0, times 0 [ 487.202685][ T3837] CPU: 0 PID: 3837 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 487.212816][ T3837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 487.222932][ T3837] Call Trace: [ 487.226233][ T3837] [ 487.229185][ T3837] dump_stack_lvl+0x125/0x1b0 [ 487.233915][ T3837] should_fail_ex+0x496/0x5b0 [ 487.238650][ T3837] should_failslab+0x9/0x20 [ 487.243218][ T3837] kmem_cache_alloc+0x61/0x400 [ 487.248027][ T3837] skb_clone+0x171/0x3c0 09:47:09 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x0) (async) r0 = socket(0x5, 0x2, 0x80) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, 0x1, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xb0, 0x6, "4e36fab1996f9b28eb88cc58f26d7a868eeaac3daa370338cfa54bf154e1b78af80c60f92bdb32ffd2f79be150dbfe90cf6b8c0842e7d347165b08ecf493d7862ec52b7afe5d167cb248d36b64b70b00b1229954f28061a9c330b9c6b27ee3343597d446352e48318614a1988a800fb2cff5d65a2643715bf764bbb673e78d3785782e05e956798ae873f43aae88ada0b5084a63920661c80febc53aa857859a804fe73bf2c3a023cdf6cd0b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x9, 0x6, "a0e1f212ca"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000040}, 0x1004c040) 09:47:09 executing program 3: ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) (async) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="50d0d2b4a5a572d6e6d5b086ce77164456452a8de06f0fd79b69195d799dd8ab2f3106c9fb22c0bd93900946c88dfc9036664f81942c0e83b29aacede952e3d1cd83") (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="50d0d2b4a5a572d6e6d5b086ce77164456452a8de06f0fd79b69195d799dd8ab2f3106c9fb22c0bd93900946c88dfc9036664f81942c0e83b29aacede952e3d1cd83") read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x3, 0x1f, 0x9, 0x7, 0x2, "ef4964d5d8ca5243"}) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000700000008f661f512e3e0a70000000001060101fffbffff0a05000100070000000500010007000000050001000700000005000100fc192da4050026b4e1143b76b4bb90ddb0363d6e78324fccf2dd04a2d6e347ebd245c8e1db2799fe4b55427e31"], 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x48804) [ 487.252326][ T3837] netlink_broadcast_filtered+0xaf9/0xf00 [ 487.258105][ T3837] ? sprintf+0xcd/0x100 [ 487.262303][ T3837] ? netlink_connect+0x550/0x550 [ 487.267293][ T3837] ? __kmalloc+0xe5/0x100 [ 487.271666][ T3837] netlink_broadcast+0x39/0x50 [ 487.276571][ T3837] kobject_uevent_env+0xbd2/0x1800 [ 487.281723][ T3837] ? bus_to_subsys+0x129/0x160 [ 487.286525][ T3837] device_add+0x1117/0x1ac0 [ 487.291074][ T3837] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 487.297967][ T3837] ? lockdep_init_map_type+0x16d/0x7c0 [ 487.303540][ T3837] nfc_register_device+0x41/0x3c0 [ 487.308578][ T3837] nci_register_device+0x7f4/0xb80 [ 487.313695][ T3837] ? nci_init_complete_req+0x410/0x410 [ 487.319183][ T3837] ? lockdep_init_map_type+0x16d/0x7c0 [ 487.324654][ T3837] virtual_ncidev_open+0x147/0x220 [ 487.329782][ T3837] ? virtual_ncidev_read+0x4e0/0x4e0 [ 487.335164][ T3837] misc_open+0x3da/0x4c0 [ 487.339414][ T3837] ? misc_devnode+0x120/0x120 [ 487.344109][ T3837] chrdev_open+0x277/0x700 [ 487.348531][ T3837] ? __unregister_chrdev+0x100/0x100 [ 487.353903][ T3837] ? fsnotify_perm.part.0+0x25d/0x630 [ 487.359281][ T3837] ? fsnotify_perm.part.0+0x268/0x630 [ 487.364748][ T3837] do_dentry_open+0x88b/0x1730 [ 487.369949][ T3837] ? __unregister_chrdev+0x100/0x100 [ 487.375235][ T3837] ? may_open+0x1f2/0x400 [ 487.380017][ T3837] path_openat+0x19af/0x29c0 [ 487.384701][ T3837] ? path_lookupat+0x770/0x770 [ 487.389479][ T3837] do_filp_open+0x1de/0x430 [ 487.393985][ T3837] ? may_open_dev+0xf0/0xf0 [ 487.398489][ T3837] ? expand_files+0x442/0x910 [ 487.403175][ T3837] ? _raw_spin_unlock+0x28/0x40 [ 487.408033][ T3837] ? alloc_fd+0x2da/0x6c0 [ 487.412369][ T3837] do_sys_openat2+0x176/0x1e0 [ 487.417054][ T3837] ? build_open_flags+0x690/0x690 [ 487.422090][ T3837] __x64_sys_openat+0x175/0x210 [ 487.426949][ T3837] ? __ia32_sys_open+0x1e0/0x1e0 [ 487.431902][ T3837] ? ksys_write+0x1a7/0x250 [ 487.436411][ T3837] ? rcu_is_watching+0x12/0xb0 [ 487.441188][ T3837] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 487.447176][ T3837] do_syscall_64+0x38/0xb0 [ 487.451615][ T3837] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 487.457573][ T3837] RIP: 0033:0x7fafba27cae9 [ 487.462072][ T3837] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 487.481793][ T3837] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 487.490211][ T3837] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 09:47:09 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x800, 0x200) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) sendto$phonet(r1, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x6) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000a0f00000000000000000000181b0000", @ANYRES32=r2, @ANYBLOB="00000000000000003c50000101000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x301aa80, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0xa, 0x800, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000140)=[0x1], &(0x7f0000000180)=[{0x2, 0x5, 0xa, 0x6}], 0x10, 0x2}, 0x90) [ 487.498198][ T3837] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 487.506169][ T3837] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 487.514227][ T3837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.522287][ T3837] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 487.530352][ T3837] 09:47:09 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x66631840, &(0x7f0000000e00)) 09:47:09 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r1, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000100)) 09:47:09 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x3, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000040)={r0, 0x9}) 09:47:09 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 59) 09:47:09 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x800, 0x200) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) sendto$phonet(r1, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) (async) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r2, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) (async) ioctl$KDSKBLED(r2, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000400)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000a0f00000000000000000000181b0000", @ANYRES32=r2, @ANYBLOB="00000000000000003c50000101000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x301aa80, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0xa, 0x800, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000140)=[0x1], &(0x7f0000000180)=[{0x2, 0x5, 0xa, 0x6}], 0x10, 0x2}, 0x90) 09:47:09 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000bc0)}, 0xfffffffffffffe4b) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) [ 487.737724][ T3879] FAULT_INJECTION: forcing a failure. [ 487.737724][ T3879] name failslab, interval 1, probability 0, space 0, times 0 [ 487.774499][ T3879] CPU: 1 PID: 3879 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 487.784631][ T3879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 487.794709][ T3879] Call Trace: [ 487.798013][ T3879] [ 487.800969][ T3879] dump_stack_lvl+0x125/0x1b0 [ 487.805695][ T3879] should_fail_ex+0x496/0x5b0 [ 487.810424][ T3879] should_failslab+0x9/0x20 [ 487.814968][ T3879] __kmem_cache_alloc_node+0x5f/0x470 [ 487.820376][ T3879] ? nfc_llcp_build_tlv+0xfd/0x230 [ 487.825519][ T3879] __kmalloc+0x4f/0x100 [ 487.829712][ T3879] nfc_llcp_build_tlv+0xfd/0x230 [ 487.834679][ T3879] nfc_llcp_build_gb.isra.0+0xf1/0x410 [ 487.840160][ T3879] ? rcu_is_watching+0x12/0xb0 [ 487.844924][ T3879] ? lock_release+0x4bf/0x680 [ 487.849607][ T3879] ? nfc_llcp_reserve_sdp_ssap+0x120/0x120 [ 487.855422][ T3879] ? reacquire_held_locks+0x4b0/0x4b0 [ 487.860907][ T3879] ? lockdep_init_map_type+0x16d/0x7c0 [ 487.866381][ T3879] nfc_llcp_register_device+0x5c5/0x9d0 [ 487.872105][ T3879] nfc_register_device+0x6d/0x3c0 [ 487.877139][ T3879] nci_register_device+0x7f4/0xb80 [ 487.882254][ T3879] ? nci_init_complete_req+0x410/0x410 [ 487.887717][ T3879] ? lockdep_init_map_type+0x16d/0x7c0 [ 487.893187][ T3879] virtual_ncidev_open+0x147/0x220 [ 487.898315][ T3879] ? virtual_ncidev_read+0x4e0/0x4e0 [ 487.903618][ T3879] misc_open+0x3da/0x4c0 [ 487.907865][ T3879] ? misc_devnode+0x120/0x120 [ 487.912543][ T3879] chrdev_open+0x277/0x700 [ 487.916959][ T3879] ? __unregister_chrdev+0x100/0x100 [ 487.922244][ T3879] ? fsnotify_perm.part.0+0x25d/0x630 [ 487.927629][ T3879] ? fsnotify_perm.part.0+0x268/0x630 [ 487.933011][ T3879] do_dentry_open+0x88b/0x1730 [ 487.937782][ T3879] ? __unregister_chrdev+0x100/0x100 [ 487.943075][ T3879] ? may_open+0x1f2/0x400 [ 487.947416][ T3879] path_openat+0x19af/0x29c0 [ 487.952024][ T3879] ? path_lookupat+0x770/0x770 [ 487.956816][ T3879] do_filp_open+0x1de/0x430 [ 487.961330][ T3879] ? may_open_dev+0xf0/0xf0 [ 487.965835][ T3879] ? expand_files+0x442/0x910 [ 487.970521][ T3879] ? _raw_spin_unlock+0x28/0x40 [ 487.975376][ T3879] ? alloc_fd+0x2da/0x6c0 [ 487.979711][ T3879] do_sys_openat2+0x176/0x1e0 [ 487.984389][ T3879] ? build_open_flags+0x690/0x690 [ 487.989428][ T3879] ? xfd_validate_state+0x5d/0x180 [ 487.994617][ T3879] __x64_sys_openat+0x175/0x210 [ 487.999473][ T3879] ? __ia32_sys_open+0x1e0/0x1e0 [ 488.004421][ T3879] ? ksys_write+0x1a7/0x250 [ 488.008938][ T3879] ? rcu_is_watching+0x12/0xb0 [ 488.013700][ T3879] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 488.019769][ T3879] do_syscall_64+0x38/0xb0 [ 488.024197][ T3879] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 488.030106][ T3879] RIP: 0033:0x7fafba27cae9 [ 488.034533][ T3879] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 488.054339][ T3879] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 488.062785][ T3879] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 488.070761][ T3879] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 488.078832][ T3879] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 09:47:09 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x3, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000040)={r0, 0x9}) (async) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000040)={r0, 0x9}) 09:47:09 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x3, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000040)={r0, 0x9}) 09:47:09 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x775804c0, &(0x7f0000000e00)) 09:47:09 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000bc0)}, 0xfffffffffffffe4b) (async) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) [ 488.086812][ T3879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 488.094785][ T3879] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 488.102793][ T3879] 09:47:09 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x800, 0x200) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) sendto$phonet(r1, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x6) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000a0f00000000000000000000181b0000", @ANYRES32=r2, @ANYBLOB="00000000000000003c50000101000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x301aa80, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0xa, 0x800, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000140)=[0x1], &(0x7f0000000180)=[{0x2, 0x5, 0xa, 0x6}], 0x10, 0x2}, 0x90) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000080), 0x800, 0x200) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) (async) sendto$phonet(r1, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) (async) syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r2, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) (async) ioctl$KDSKBLED(r2, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000400)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000a0f00000000000000000000181b0000", @ANYRES32=r2, @ANYBLOB="00000000000000003c50000101000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x301aa80, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0xa, 0x800, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000140)=[0x1], &(0x7f0000000180)=[{0x2, 0x5, 0xa, 0x6}], 0x10, 0x2}, 0x90) (async) 09:47:09 executing program 3: syz_open_dev$hidraw(&(0x7f0000000000), 0x268, 0x111800) syz_open_dev$hidraw(&(0x7f0000000040), 0xe924, 0x490000) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x287, 0xa0000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) sendto$phonet(r1, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x42242) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x6) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000400)) syz_open_dev$vcsu(&(0x7f0000000180), 0xff, 0x201080) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$VT_RESIZEX(r3, 0x560a, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x6) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r4}, 0x8) read$hidraw(r0, 0x0, 0xfffffffffffffefb) 09:47:10 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6, 0x8, 0x79e2, 0x4, r0, 0x1, '\x00', 0x0, r1, 0x0, 0x2, 0x5, 0xd}, 0x48) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f0000000280)}, 0xc) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f00000000c0)) write$hidraw(r0, &(0x7f0000000000)="22452e98deec74860c14956604b389cefc0751010395d6f583b7fb0894e8604b562e9c98f6d59173d5c1b86d2577144859ef3b75e3ec96d468ca9baf617174a41c824938e447641c7238b25db2ba13f1e2dd0487bac2db5098fe8d9106468ee40de4e3fe6566ac97881f25f0b8b9d2a3a4e548b1910f1c5b17eb0083def0325eb551acadc6f7ba7c7bb372aaa395048ca5ea5651d5a1a9806df7294db0", 0x9d) 09:47:10 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) 09:47:10 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 60) 09:47:10 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000bc0)}, 0xfffffffffffffe4b) (async) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) 09:47:10 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x785804c0, &(0x7f0000000e00)) [ 488.347706][ T3923] FAULT_INJECTION: forcing a failure. [ 488.347706][ T3923] name failslab, interval 1, probability 0, space 0, times 0 [ 488.369017][ T3923] CPU: 0 PID: 3923 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 488.379053][ T3923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 488.389135][ T3923] Call Trace: [ 488.392439][ T3923] [ 488.395414][ T3923] dump_stack_lvl+0x125/0x1b0 [ 488.400227][ T3923] should_fail_ex+0x496/0x5b0 [ 488.404979][ T3923] should_failslab+0x9/0x20 [ 488.409527][ T3923] kmem_cache_alloc+0x61/0x400 [ 488.414364][ T3923] skb_clone+0x171/0x3c0 [ 488.418665][ T3923] netlink_broadcast_filtered+0xaf9/0xf00 [ 488.424436][ T3923] ? sprintf+0xcd/0x100 [ 488.428627][ T3923] ? netlink_connect+0x550/0x550 [ 488.433609][ T3923] ? __kmalloc+0xe5/0x100 [ 488.437975][ T3923] netlink_broadcast+0x39/0x50 [ 488.442863][ T3923] kobject_uevent_env+0xbd2/0x1800 09:47:10 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) 09:47:10 executing program 3: syz_open_dev$hidraw(&(0x7f0000000000), 0x268, 0x111800) (async) syz_open_dev$hidraw(&(0x7f0000000040), 0xe924, 0x490000) (async) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x287, 0xa0000) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) (async) sendto$phonet(r1, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x42242) (async) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) (async) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000400)) (async) syz_open_dev$vcsu(&(0x7f0000000180), 0xff, 0x201080) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r3, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r3, 0x560a, 0x0) (async) ioctl$KDSKBLED(r3, 0x4b65, 0x6) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r4}, 0x8) (async) read$hidraw(r0, 0x0, 0xfffffffffffffefb) 09:47:10 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6, 0x8, 0x79e2, 0x4, r0, 0x1, '\x00', 0x0, r1, 0x0, 0x2, 0x5, 0xd}, 0x48) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f0000000280)}, 0xc) (async) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f00000000c0)) write$hidraw(r0, &(0x7f0000000000)="22452e98deec74860c14956604b389cefc0751010395d6f583b7fb0894e8604b562e9c98f6d59173d5c1b86d2577144859ef3b75e3ec96d468ca9baf617174a41c824938e447641c7238b25db2ba13f1e2dd0487bac2db5098fe8d9106468ee40de4e3fe6566ac97881f25f0b8b9d2a3a4e548b1910f1c5b17eb0083def0325eb551acadc6f7ba7c7bb372aaa395048ca5ea5651d5a1a9806df7294db0", 0x9d) [ 488.448007][ T3923] ? bus_to_subsys+0x129/0x160 [ 488.452799][ T3923] device_add+0x1117/0x1ac0 [ 488.457341][ T3923] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 488.464230][ T3923] ? lockdep_init_map_type+0x16d/0x7c0 [ 488.469728][ T3923] nfc_register_device+0x41/0x3c0 [ 488.474780][ T3923] nci_register_device+0x7f4/0xb80 [ 488.479999][ T3923] ? nci_init_complete_req+0x410/0x410 [ 488.485461][ T3923] ? lockdep_init_map_type+0x16d/0x7c0 [ 488.491032][ T3923] virtual_ncidev_open+0x147/0x220 [ 488.496178][ T3923] ? virtual_ncidev_read+0x4e0/0x4e0 [ 488.501497][ T3923] misc_open+0x3da/0x4c0 [ 488.505792][ T3923] ? misc_devnode+0x120/0x120 [ 488.510486][ T3923] chrdev_open+0x277/0x700 [ 488.514984][ T3923] ? __unregister_chrdev+0x100/0x100 [ 488.520281][ T3923] ? fsnotify_perm.part.0+0x25d/0x630 [ 488.525663][ T3923] ? fsnotify_perm.part.0+0x268/0x630 [ 488.531225][ T3923] do_dentry_open+0x88b/0x1730 [ 488.536023][ T3923] ? __unregister_chrdev+0x100/0x100 [ 488.541315][ T3923] ? may_open+0x1f2/0x400 [ 488.545740][ T3923] path_openat+0x19af/0x29c0 [ 488.550333][ T3923] ? path_lookupat+0x770/0x770 [ 488.555110][ T3923] do_filp_open+0x1de/0x430 [ 488.560050][ T3923] ? may_open_dev+0xf0/0xf0 [ 488.564563][ T3923] ? expand_files+0x442/0x910 [ 488.569249][ T3923] ? _raw_spin_unlock+0x28/0x40 [ 488.574106][ T3923] ? alloc_fd+0x2da/0x6c0 [ 488.578439][ T3923] do_sys_openat2+0x176/0x1e0 [ 488.583118][ T3923] ? build_open_flags+0x690/0x690 [ 488.588145][ T3923] __x64_sys_openat+0x175/0x210 [ 488.593007][ T3923] ? __ia32_sys_open+0x1e0/0x1e0 [ 488.598035][ T3923] ? ksys_write+0x1a7/0x250 [ 488.602542][ T3923] ? rcu_is_watching+0x12/0xb0 [ 488.607303][ T3923] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 488.613385][ T3923] do_syscall_64+0x38/0xb0 [ 488.617830][ T3923] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 488.623744][ T3923] RIP: 0033:0x7fafba27cae9 [ 488.628180][ T3923] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 488.647994][ T3923] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 488.656596][ T3923] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 488.664849][ T3923] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 488.672836][ T3923] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 488.680821][ T3923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 488.688967][ T3923] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 488.696942][ T3923] 09:47:10 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r0, 0x4b36) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6, 0x8, 0x79e2, 0x4, r0, 0x1, '\x00', 0x0, r1, 0x0, 0x2, 0x5, 0xd}, 0x48) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f0000000280)}, 0xc) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f00000000c0)) write$hidraw(r0, &(0x7f0000000000)="22452e98deec74860c14956604b389cefc0751010395d6f583b7fb0894e8604b562e9c98f6d59173d5c1b86d2577144859ef3b75e3ec96d468ca9baf617174a41c824938e447641c7238b25db2ba13f1e2dd0487bac2db5098fe8d9106468ee40de4e3fe6566ac97881f25f0b8b9d2a3a4e548b1910f1c5b17eb0083def0325eb551acadc6f7ba7c7bb372aaa395048ca5ea5651d5a1a9806df7294db0", 0x9d) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) sendto$phonet(r0, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6, 0x8, 0x79e2, 0x4, r0, 0x1, '\x00', 0x0, r1, 0x0, 0x2, 0x5, 0xd}, 0x48) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f0000000280)}, 0xc) (async) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f00000000c0)) (async) write$hidraw(r0, &(0x7f0000000000)="22452e98deec74860c14956604b389cefc0751010395d6f583b7fb0894e8604b562e9c98f6d59173d5c1b86d2577144859ef3b75e3ec96d468ca9baf617174a41c824938e447641c7238b25db2ba13f1e2dd0487bac2db5098fe8d9106468ee40de4e3fe6566ac97881f25f0b8b9d2a3a4e548b1910f1c5b17eb0083def0325eb551acadc6f7ba7c7bb372aaa395048ca5ea5651d5a1a9806df7294db0", 0x9d) (async) 09:47:10 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) prctl$PR_GET_THP_DISABLE(0x2a) 09:47:10 executing program 3: syz_open_dev$hidraw(&(0x7f0000000000), 0x268, 0x111800) syz_open_dev$hidraw(&(0x7f0000000040), 0xe924, 0x490000) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x287, 0xa0000) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) (async) sendto$phonet(r1, &(0x7f0000000380)="6212aba7b09beec47aa215400f19930e3b80b92114782e8ef1c22d3d", 0x1c, 0x0, &(0x7f00000003c0)={0x23, 0x4f, 0x43, 0x3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)}, 0x10) syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x42242) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r2, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x6) (async, rerun: 64) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000400)) (async, rerun: 64) syz_open_dev$vcsu(&(0x7f0000000180), 0xff, 0x201080) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r3, 0x540a, 0x3) (async, rerun: 32) ioctl$VT_RESIZEX(r3, 0x560a, 0x0) (async, rerun: 32) ioctl$KDSKBLED(r3, 0x4b65, 0x6) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r4}, 0x8) (async) read$hidraw(r0, 0x0, 0xfffffffffffffefb) 09:47:10 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) 09:47:10 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) 09:47:10 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) (async) prctl$PR_GET_THP_DISABLE(0x2a) 09:47:10 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 61) 09:47:10 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x80086301, &(0x7f0000000e00)) 09:47:10 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x18, "4e25d7d4f29f358dc1e78a633f080b162997ab45a2a336bed82c4dfef06c2618c8cd28b04bb95e0572187705ae892344616626735ac66effead782ad312baed0"}) 09:47:10 executing program 5: socketpair(0x22, 0x0, 0x0, &(0x7f0000000300)) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000015c0), 0x0, 0x500) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r2, 0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000100)=0xf) 09:47:10 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x18, "4e25d7d4f29f358dc1e78a633f080b162997ab45a2a336bed82c4dfef06c2618c8cd28b04bb95e0572187705ae892344616626735ac66effead782ad312baed0"}) 09:47:10 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) [ 488.966538][ T3974] FAULT_INJECTION: forcing a failure. [ 488.966538][ T3974] name failslab, interval 1, probability 0, space 0, times 0 [ 488.979763][ T3974] CPU: 0 PID: 3974 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 488.989956][ T3974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 489.000039][ T3974] Call Trace: [ 489.003363][ T3974] [ 489.006317][ T3974] dump_stack_lvl+0x125/0x1b0 [ 489.011130][ T3974] should_fail_ex+0x496/0x5b0 09:47:10 executing program 5: socketpair(0x22, 0x0, 0x0, &(0x7f0000000300)) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000015c0), 0x0, 0x500) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r2, 0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000100)=0xf) socketpair(0x22, 0x0, 0x0, &(0x7f0000000300)) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f00000015c0), 0x0, 0x500) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r2, 0x0) (async) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000100)=0xf) (async) [ 489.015871][ T3974] should_failslab+0x9/0x20 [ 489.020415][ T3974] kmem_cache_alloc+0x61/0x400 [ 489.025212][ T3974] skb_clone+0x171/0x3c0 [ 489.029497][ T3974] netlink_broadcast_filtered+0xaf9/0xf00 [ 489.035374][ T3974] ? sprintf+0xcd/0x100 [ 489.039812][ T3974] ? netlink_connect+0x550/0x550 [ 489.044819][ T3974] ? __kmalloc+0xe5/0x100 [ 489.049187][ T3974] netlink_broadcast+0x39/0x50 [ 489.054098][ T3974] kobject_uevent_env+0xbd2/0x1800 [ 489.059246][ T3974] ? bus_to_subsys+0x129/0x160 09:47:10 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x18, "4e25d7d4f29f358dc1e78a633f080b162997ab45a2a336bed82c4dfef06c2618c8cd28b04bb95e0572187705ae892344616626735ac66effead782ad312baed0"}) 09:47:10 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) [ 489.064048][ T3974] device_add+0x1117/0x1ac0 [ 489.068596][ T3974] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 489.075581][ T3974] ? lockdep_init_map_type+0x16d/0x7c0 [ 489.081087][ T3974] nfc_register_device+0x41/0x3c0 [ 489.086150][ T3974] nci_register_device+0x7f4/0xb80 [ 489.091396][ T3974] ? nci_init_complete_req+0x410/0x410 [ 489.097069][ T3974] ? lockdep_init_map_type+0x16d/0x7c0 [ 489.102585][ T3974] virtual_ncidev_open+0x147/0x220 [ 489.107748][ T3974] ? virtual_ncidev_read+0x4e0/0x4e0 [ 489.113082][ T3974] misc_open+0x3da/0x4c0 09:47:10 executing program 3: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x100000001, 0x40, 0x6, 0x80000001, 0xf861, 0x7}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r3, 0x5416, 0x0) syz_open_pts(r1, 0x101001) syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x181041) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r4, 0x5416, 0x0) r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) syz_open_pts(r2, 0x100) syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x101000) syz_open_pts(r5, 0x60000) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r6, 0x5416, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r7, 0x5416, 0x0) ioctl$PIO_FONTRESET(r7, 0x4b6d, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) [ 489.117360][ T3974] ? misc_devnode+0x120/0x120 [ 489.122076][ T3974] chrdev_open+0x277/0x700 [ 489.126524][ T3974] ? __unregister_chrdev+0x100/0x100 [ 489.131842][ T3974] ? fsnotify_perm.part.0+0x25d/0x630 [ 489.137253][ T3974] ? fsnotify_perm.part.0+0x268/0x630 [ 489.142663][ T3974] do_dentry_open+0x88b/0x1730 [ 489.147467][ T3974] ? __unregister_chrdev+0x100/0x100 [ 489.152790][ T3974] ? may_open+0x1f2/0x400 [ 489.157237][ T3974] path_openat+0x19af/0x29c0 [ 489.161866][ T3974] ? path_lookupat+0x770/0x770 [ 489.166682][ T3974] do_filp_open+0x1de/0x430 [ 489.171221][ T3974] ? may_open_dev+0xf0/0xf0 [ 489.175751][ T3974] ? expand_files+0x442/0x910 [ 489.180689][ T3974] ? _raw_spin_unlock+0x28/0x40 [ 489.185573][ T3974] ? alloc_fd+0x2da/0x6c0 [ 489.189963][ T3974] do_sys_openat2+0x176/0x1e0 [ 489.194686][ T3974] ? build_open_flags+0x690/0x690 [ 489.199756][ T3974] __x64_sys_openat+0x175/0x210 [ 489.204653][ T3974] ? __ia32_sys_open+0x1e0/0x1e0 [ 489.209641][ T3974] ? ksys_write+0x1a7/0x250 [ 489.214185][ T3974] ? rcu_is_watching+0x12/0xb0 [ 489.219001][ T3974] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 489.225361][ T3974] do_syscall_64+0x38/0xb0 [ 489.229816][ T3974] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 489.235923][ T3974] RIP: 0033:0x7fafba27cae9 [ 489.240358][ T3974] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 09:47:11 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) (rerun: 64) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) (async) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_open_pts(r2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) 09:47:11 executing program 5: socketpair(0x22, 0x0, 0x0, &(0x7f0000000300)) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f00000015c0), 0x0, 0x500) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x203, 0x40000, 0x3, 0xc29, 0x6, 0x6, 0x2, 0x6, 0x800, 0x4, 0x5, 0x10000, 0x1}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_pts(r2, 0x0) (async, rerun: 64) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000100)=0xf) (rerun: 64) [ 489.260158][ T3974] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 489.268570][ T3974] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 489.276537][ T3974] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 489.284521][ T3974] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 489.292500][ T3974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.300464][ T3974] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 489.308429][ T3974] 09:47:11 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvmsg$can_j1939(r0, 0x0, 0x0) 09:47:11 executing program 3: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x100000001, 0x40, 0x6, 0x80000001, 0xf861, 0x7}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) (async, rerun: 64) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 64) ioctl$TIOCMBIS(r2, 0x5416, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r3, 0x5416, 0x0) (async) syz_open_pts(r1, 0x101001) (async) syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x181041) (async) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r4, 0x5416, 0x0) (async) r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) (async) syz_open_pts(r2, 0x100) (async, rerun: 64) syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x101000) (async, rerun: 64) syz_open_pts(r5, 0x60000) (async) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r6, 0x5416, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x0) (async, rerun: 64) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 64) ioctl$TIOCMBIS(r7, 0x5416, 0x0) (async) ioctl$PIO_FONTRESET(r7, 0x4b6d, 0x0) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) 09:47:11 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$phonet(r0, &(0x7f0000000000)="b874aa9c5950d5994d078915c82499ef91ee669e129095b6bcba9d69e3efca7762e7b10617de5c2b8497e61ac9c51b17b9a81e310324986f32be70613282e7fea9aae6cde3b0609f1a3b3645ad9cf544679ebfba25c4a122d2674c83f3a239a3b1b6b8f9384a3d6af481d6a780d787bcb6a423e5334c10c9a646dd9ac94b258439b3fdb0aa77aa46be3d572e4e78acd2d5220d0bd14f0c4397ebae1755a9de415cf44f9774eba79216", 0xa9, 0x4000010, &(0x7f00000000c0)={0x23, 0x26, 0xc3}, 0x10) 09:47:11 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x80086601, &(0x7f0000000e00)) 09:47:11 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 62) 09:47:11 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvmsg$can_j1939(r0, 0x0, 0x0) 09:47:11 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$phonet(r0, &(0x7f0000000000)="b874aa9c5950d5994d078915c82499ef91ee669e129095b6bcba9d69e3efca7762e7b10617de5c2b8497e61ac9c51b17b9a81e310324986f32be70613282e7fea9aae6cde3b0609f1a3b3645ad9cf544679ebfba25c4a122d2674c83f3a239a3b1b6b8f9384a3d6af481d6a780d787bcb6a423e5334c10c9a646dd9ac94b258439b3fdb0aa77aa46be3d572e4e78acd2d5220d0bd14f0c4397ebae1755a9de415cf44f9774eba79216", 0xa9, 0x4000010, &(0x7f00000000c0)={0x23, 0x26, 0xc3}, 0x10) (async) sendto$phonet(r0, &(0x7f0000000000)="b874aa9c5950d5994d078915c82499ef91ee669e129095b6bcba9d69e3efca7762e7b10617de5c2b8497e61ac9c51b17b9a81e310324986f32be70613282e7fea9aae6cde3b0609f1a3b3645ad9cf544679ebfba25c4a122d2674c83f3a239a3b1b6b8f9384a3d6af481d6a780d787bcb6a423e5334c10c9a646dd9ac94b258439b3fdb0aa77aa46be3d572e4e78acd2d5220d0bd14f0c4397ebae1755a9de415cf44f9774eba79216", 0xa9, 0x4000010, &(0x7f00000000c0)={0x23, 0x26, 0xc3}, 0x10) [ 489.514316][ T4031] FAULT_INJECTION: forcing a failure. [ 489.514316][ T4031] name failslab, interval 1, probability 0, space 0, times 0 09:47:11 executing program 5: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$phonet(r0, &(0x7f0000000000)="b874aa9c5950d5994d078915c82499ef91ee669e129095b6bcba9d69e3efca7762e7b10617de5c2b8497e61ac9c51b17b9a81e310324986f32be70613282e7fea9aae6cde3b0609f1a3b3645ad9cf544679ebfba25c4a122d2674c83f3a239a3b1b6b8f9384a3d6af481d6a780d787bcb6a423e5334c10c9a646dd9ac94b258439b3fdb0aa77aa46be3d572e4e78acd2d5220d0bd14f0c4397ebae1755a9de415cf44f9774eba79216", 0xa9, 0x4000010, &(0x7f00000000c0)={0x23, 0x26, 0xc3}, 0x10) [ 489.558219][ T4031] CPU: 1 PID: 4031 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 489.568258][ T4031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 489.578333][ T4031] Call Trace: [ 489.581982][ T4031] [ 489.584932][ T4031] dump_stack_lvl+0x125/0x1b0 [ 489.589657][ T4031] should_fail_ex+0x496/0x5b0 [ 489.594552][ T4031] should_failslab+0x9/0x20 [ 489.599099][ T4031] __kmem_cache_alloc_node+0x5f/0x470 09:47:11 executing program 3: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x100000001, 0x40, 0x6, 0x80000001, 0xf861, 0x7}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r3, 0x5416, 0x0) syz_open_pts(r1, 0x101001) syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x181041) (async) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r4, 0x5416, 0x0) r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) (async) syz_open_pts(r2, 0x100) (async, rerun: 32) syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x101000) (rerun: 32) syz_open_pts(r5, 0x60000) (async) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r6, 0x5416, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x0) (async) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r7, 0x5416, 0x0) (async) ioctl$PIO_FONTRESET(r7, 0x4b6d, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) [ 489.605030][ T4031] ? nfc_llcp_build_tlv+0xfd/0x230 [ 489.610177][ T4031] __kmalloc+0x4f/0x100 [ 489.614379][ T4031] nfc_llcp_build_tlv+0xfd/0x230 [ 489.619349][ T4031] nfc_llcp_build_gb.isra.0+0x165/0x410 [ 489.624940][ T4031] ? rcu_is_watching+0x12/0xb0 [ 489.629824][ T4031] ? lock_release+0x4bf/0x680 [ 489.634538][ T4031] ? nfc_llcp_reserve_sdp_ssap+0x120/0x120 [ 489.640407][ T4031] ? reacquire_held_locks+0x4b0/0x4b0 [ 489.645827][ T4031] ? lockdep_init_map_type+0x16d/0x7c0 [ 489.651417][ T4031] nfc_llcp_register_device+0x5c5/0x9d0 [ 489.656996][ T4031] nfc_register_device+0x6d/0x3c0 [ 489.662256][ T4031] nci_register_device+0x7f4/0xb80 [ 489.667667][ T4031] ? nci_init_complete_req+0x410/0x410 [ 489.673640][ T4031] ? lockdep_init_map_type+0x16d/0x7c0 [ 489.679324][ T4031] virtual_ncidev_open+0x147/0x220 [ 489.684545][ T4031] ? virtual_ncidev_read+0x4e0/0x4e0 [ 489.690037][ T4031] misc_open+0x3da/0x4c0 [ 489.694631][ T4031] ? misc_devnode+0x120/0x120 [ 489.699316][ T4031] chrdev_open+0x277/0x700 [ 489.703738][ T4031] ? __unregister_chrdev+0x100/0x100 [ 489.709126][ T4031] ? fsnotify_perm.part.0+0x25d/0x630 [ 489.714720][ T4031] ? fsnotify_perm.part.0+0x268/0x630 [ 489.720128][ T4031] do_dentry_open+0x88b/0x1730 [ 489.724895][ T4031] ? __unregister_chrdev+0x100/0x100 [ 489.730186][ T4031] ? may_open+0x1f2/0x400 [ 489.734610][ T4031] path_openat+0x19af/0x29c0 [ 489.739205][ T4031] ? path_lookupat+0x770/0x770 [ 489.743985][ T4031] do_filp_open+0x1de/0x430 [ 489.748491][ T4031] ? may_open_dev+0xf0/0xf0 [ 489.753090][ T4031] ? expand_files+0x442/0x910 [ 489.757783][ T4031] ? _raw_spin_unlock+0x28/0x40 [ 489.762824][ T4031] ? alloc_fd+0x2da/0x6c0 [ 489.767255][ T4031] do_sys_openat2+0x176/0x1e0 [ 489.772031][ T4031] ? build_open_flags+0x690/0x690 [ 489.777594][ T4031] __x64_sys_openat+0x175/0x210 [ 489.782627][ T4031] ? __ia32_sys_open+0x1e0/0x1e0 [ 489.787604][ T4031] ? ksys_write+0x1a7/0x250 [ 489.792259][ T4031] ? rcu_is_watching+0x12/0xb0 [ 489.797204][ T4031] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 489.803194][ T4031] do_syscall_64+0x38/0xb0 [ 489.809727][ T4031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 489.815980][ T4031] RIP: 0033:0x7fafba27cae9 [ 489.820395][ T4031] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 489.840187][ T4031] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 489.848609][ T4031] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 09:47:11 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x100) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) [ 489.857191][ T4031] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 489.865250][ T4031] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 489.873622][ T4031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.881703][ T4031] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 489.890226][ T4031] 09:47:12 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000300)={0x1773, 0x1, 0x8, 0x3b9, 0x53e0, 0x200}) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f00000005c0)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14, 0x52, 0x800, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000600)) ioctl$KDSKBLED(r1, 0x4b65, 0x6) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getaddr={0x14, 0x16, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x20801, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000580)={0x7, 0x0, 0x10000}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB=']', @ANYRES32=0x0, @ANYBLOB="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"]}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r5, 0x5416, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0x2) 09:47:12 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvmsg$can_j1939(r0, 0x0, 0x0) 09:47:12 executing program 3: syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x101000) socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2c, 0x3, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipmr_getroute={0x1c, 0x1a, 0x800, 0x70bd25, 0x25dfdbfb, {0x80, 0x10, 0x10, 0x7, 0xfd, 0x0, 0xfd, 0xf, 0x2000}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x44000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x4, 0x3, 0x8}) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000100)='#*\x00\x00\x93\xde\x1b/\x01%h/\x00') 09:47:12 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x80087601, &(0x7f0000000e00)) 09:47:12 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 63) 09:47:12 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x100) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) 09:47:12 executing program 3: syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x101000) socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2c, 0x3, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipmr_getroute={0x1c, 0x1a, 0x800, 0x70bd25, 0x25dfdbfb, {0x80, 0x10, 0x10, 0x7, 0xfd, 0x0, 0xfd, 0xf, 0x2000}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x44000) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x4, 0x3, 0x8}) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000100)='#*\x00\x00\x93\xde\x1b/\x01%h/\x00') [ 490.671845][ T27] audit: type=1400 audit(1693734432.460:160): avc: denied { create } for pid=4247 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 09:47:12 executing program 5: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x100) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x100) (async) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) (async) 09:47:12 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0xa, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x7, 0x4, {{0xb, 0x4, 0x0, 0x9, 0x2c, 0x68, 0x0, 0xab, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@rr={0x7, 0x17, 0x9a, [@dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, @multicast2, @rand_addr=0x64010102, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x108, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) [ 490.747637][ T4252] FAULT_INJECTION: forcing a failure. [ 490.747637][ T4252] name failslab, interval 1, probability 0, space 0, times 0 [ 490.762541][ T4252] CPU: 0 PID: 4252 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 490.772571][ T4252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 490.782910][ T4252] Call Trace: [ 490.786210][ T4252] [ 490.789165][ T4252] dump_stack_lvl+0x125/0x1b0 [ 490.793893][ T4252] should_fail_ex+0x496/0x5b0 [ 490.798640][ T4252] should_failslab+0x9/0x20 09:47:12 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 64) [ 490.803207][ T4252] __kmem_cache_alloc_node+0x5f/0x470 [ 490.803247][ T4252] ? nfc_llcp_build_tlv+0xfd/0x230 09:47:12 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x801c581f, &(0x7f0000000e00)) 09:47:12 executing program 3: syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x101000) socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2c, 0x3, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipmr_getroute={0x1c, 0x1a, 0x800, 0x70bd25, 0x25dfdbfb, {0x80, 0x10, 0x10, 0x7, 0xfd, 0x0, 0xfd, 0xf, 0x2000}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x44000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x4, 0x3, 0x8}) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000100)='#*\x00\x00\x93\xde\x1b/\x01%h/\x00') syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x101000) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socketpair(0x2c, 0x3, 0x3ff, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipmr_getroute={0x1c, 0x1a, 0x800, 0x70bd25, 0x25dfdbfb, {0x80, 0x10, 0x10, 0x7, 0xfd, 0x0, 0xfd, 0xf, 0x2000}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x44000) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x4, 0x3, 0x8}) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000100)='#*\x00\x00\x93\xde\x1b/\x01%h/\x00') (async) [ 490.803272][ T4252] __kmalloc+0x4f/0x100 [ 490.803302][ T4252] nfc_llcp_build_tlv+0xfd/0x230 [ 490.803327][ T4252] nfc_llcp_build_gb.isra.0+0x165/0x410 [ 490.803363][ T4252] ? rcu_is_watching+0x12/0xb0 [ 490.803385][ T4252] ? lock_release+0x4bf/0x680 [ 490.803413][ T4252] ? nfc_llcp_reserve_sdp_ssap+0x120/0x120 [ 490.803456][ T4252] ? reacquire_held_locks+0x4b0/0x4b0 [ 490.803489][ T4252] ? lockdep_init_map_type+0x16d/0x7c0 [ 490.803524][ T4252] nfc_llcp_register_device+0x5c5/0x9d0 [ 490.803548][ T4252] nfc_register_device+0x6d/0x3c0 [ 490.803579][ T4252] nci_register_device+0x7f4/0xb80 [ 490.803606][ T4252] ? nci_init_complete_req+0x410/0x410 [ 490.803633][ T4252] ? lockdep_init_map_type+0x16d/0x7c0 [ 490.803666][ T4252] virtual_ncidev_open+0x147/0x220 [ 490.803702][ T4252] ? virtual_ncidev_read+0x4e0/0x4e0 [ 490.803734][ T4252] misc_open+0x3da/0x4c0 [ 490.803760][ T4252] ? misc_devnode+0x120/0x120 09:47:12 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000300)={0x1773, 0x1, 0x8, 0x3b9, 0x53e0, 0x200}) (async) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) (async) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f00000005c0)=0x5) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14, 0x52, 0x800, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x1ff, 0x0, 0x0, 0x11, "f28c5a32e8915498f6b06fb8f4b173676d5a98"}) (async) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, 0x0) (async) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000600)) ioctl$KDSKBLED(r1, 0x4b65, 0x6) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getaddr={0x14, 0x16, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) (async) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000400)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x20801, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000580)={0x7, 0x0, 0x10000}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB=']', @ANYRES32=0x0, @ANYBLOB="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"]}) (async) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r5, 0x5416, 0x0) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0x2) 09:47:12 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socketpair(0x11, 0xa, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x7, 0x4, {{0xb, 0x4, 0x0, 0x9, 0x2c, 0x68, 0x0, 0xab, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@rr={0x7, 0x17, 0x9a, [@dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, @multicast2, @rand_addr=0x64010102, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x108, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 09:47:12 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) 09:47:12 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (fail_nth: 65) 09:47:12 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0xc0045878, &(0x7f0000000e00)) [ 490.803785][ T4252] chrdev_open+0x277/0x700 [ 490.803811][ T4252] ? __unregister_chrdev+0x100/0x100 [ 490.803835][ T4252] ? fsnotify_perm.part.0+0x25d/0x630 [ 490.803863][ T4252] ? fsnotify_perm.part.0+0x268/0x630 [ 490.803894][ T4252] do_dentry_open+0x88b/0x1730 [ 490.803917][ T4252] ? __unregister_chrdev+0x100/0x100 [ 490.803940][ T4252] ? may_open+0x1f2/0x400 09:47:13 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) 09:47:13 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0xa, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x7, 0x4, {{0xb, 0x4, 0x0, 0x9, 0x2c, 0x68, 0x0, 0xab, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@rr={0x7, 0x17, 0x9a, [@dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, @multicast2, @rand_addr=0x64010102, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x108, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) socketpair(0x11, 0xa, 0x5, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x7, 0x4, {{0xb, 0x4, 0x0, 0x9, 0x2c, 0x68, 0x0, 0xab, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@rr={0x7, 0x17, 0x9a, [@dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, @multicast2, @rand_addr=0x64010102, @loopback]}]}}}}}) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x108, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) (async) [ 490.803971][ T4252] path_openat+0x19af/0x29c0 [ 490.803994][ T4252] ? path_lookupat+0x770/0x770 [ 490.804030][ T4252] do_filp_open+0x1de/0x430 [ 490.804052][ T4252] ? may_open_dev+0xf0/0xf0 [ 490.804073][ T4252] ? expand_files+0x442/0x910 [ 490.804106][ T4252] ? _raw_spin_unlock+0x28/0x40 [ 490.804134][ T4252] ? alloc_fd+0x2da/0x6c0 [ 490.804162][ T4252] do_sys_openat2+0x176/0x1e0 [ 490.804188][ T4252] ? build_open_flags+0x690/0x690 [ 490.804215][ T4252] __x64_sys_openat+0x175/0x210 [ 490.804241][ T4252] ? __ia32_sys_open+0x1e0/0x1e0 [ 490.804265][ T4252] ? ksys_write+0x1a7/0x250 09:47:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 490.804292][ T4252] ? rcu_is_watching+0x12/0xb0 [ 490.804313][ T4252] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 490.804341][ T4252] do_syscall_64+0x38/0xb0 [ 490.804372][ T4252] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 490.804407][ T4252] RIP: 0033:0x7fafba27cae9 [ 490.804425][ T4252] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 09:47:13 executing program 3: read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) [ 490.804454][ T4252] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 490.804479][ T4252] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 490.804496][ T4252] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 490.804512][ T4252] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 490.804526][ T4252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.804541][ T4252] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 490.804560][ T4252] 09:47:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 490.879479][ T27] audit: type=1400 audit(1693734432.670:161): avc: denied { create } for pid=4266 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 490.985548][ T27] audit: type=1400 audit(1693734432.780:162): avc: denied { ioctl } for pid=4262 comm="syz-executor.2" path="/dev/dri/renderD128" dev="devtmpfs" ino=627 ioctlcmd=0x6434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 491.007829][ T4280] FAULT_INJECTION: forcing a failure. [ 491.007829][ T4280] name failslab, interval 1, probability 0, space 0, times 0 [ 491.007860][ T4280] CPU: 1 PID: 4280 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 491.007886][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 491.007899][ T4280] Call Trace: [ 491.007907][ T4280] [ 491.007915][ T4280] dump_stack_lvl+0x125/0x1b0 [ 491.007965][ T4280] should_fail_ex+0x496/0x5b0 [ 491.008002][ T4280] should_failslab+0x9/0x20 [ 491.008035][ T4280] __kmem_cache_alloc_node+0x5f/0x470 09:47:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) (async) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) [ 491.008062][ T4280] kmalloc_trace+0x25/0xe0 [ 491.008090][ T4280] device_add+0xd18/0x1ac0 [ 491.008124][ T4280] ? dev_set_name+0xc8/0x100 [ 491.008152][ T4280] ? device_initialize+0x510/0x510 [ 491.008181][ T4280] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 491.008216][ T4280] ? __init_waitqueue_head+0xca/0x150 [ 491.008245][ T4280] rfkill_register+0x1a9/0xb00 [ 491.008362][ T4280] nfc_register_device+0x11f/0x3c0 [ 491.008393][ T4280] nci_register_device+0x7f4/0xb80 [ 491.008422][ T4280] ? nci_init_complete_req+0x410/0x410 [ 491.008447][ T4280] ? lockdep_init_map_type+0x16d/0x7c0 [ 491.008479][ T4280] virtual_ncidev_open+0x147/0x220 [ 491.008510][ T4280] ? virtual_ncidev_read+0x4e0/0x4e0 [ 491.008540][ T4280] misc_open+0x3da/0x4c0 [ 491.008565][ T4280] ? misc_devnode+0x120/0x120 [ 491.008589][ T4280] chrdev_open+0x277/0x700 [ 491.008611][ T4280] ? __unregister_chrdev+0x100/0x100 [ 491.008633][ T4280] ? fsnotify_perm.part.0+0x25d/0x630 [ 491.008659][ T4280] ? fsnotify_perm.part.0+0x268/0x630 [ 491.008688][ T4280] do_dentry_open+0x88b/0x1730 [ 491.008710][ T4280] ? __unregister_chrdev+0x100/0x100 [ 491.008730][ T4280] ? may_open+0x1f2/0x400 [ 491.008758][ T4280] path_openat+0x19af/0x29c0 [ 491.008781][ T4280] ? path_lookupat+0x770/0x770 [ 491.008816][ T4280] do_filp_open+0x1de/0x430 [ 491.008837][ T4280] ? may_open_dev+0xf0/0xf0 [ 491.008854][ T4280] ? expand_files+0x442/0x910 [ 491.008883][ T4280] ? _raw_spin_unlock+0x28/0x40 [ 491.008908][ T4280] ? alloc_fd+0x2da/0x6c0 [ 491.008944][ T4280] do_sys_openat2+0x176/0x1e0 [ 491.008970][ T4280] ? build_open_flags+0x690/0x690 [ 491.009000][ T4280] __x64_sys_openat+0x175/0x210 [ 491.009025][ T4280] ? __ia32_sys_open+0x1e0/0x1e0 [ 491.009049][ T4280] ? ksys_write+0x1a7/0x250 [ 491.009077][ T4280] ? rcu_is_watching+0x12/0xb0 [ 491.009097][ T4280] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 491.009124][ T4280] do_syscall_64+0x38/0xb0 [ 491.009154][ T4280] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 491.009189][ T4280] RIP: 0033:0x7fafba27cae9 [ 491.009208][ T4280] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 491.009232][ T4280] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 491.009257][ T4280] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 491.009275][ T4280] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 491.009290][ T4280] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 491.009305][ T4280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 491.009319][ T4280] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 491.009338][ T4280] [ 491.271987][ T4310] FAULT_INJECTION: forcing a failure. [ 491.271987][ T4310] name failslab, interval 1, probability 0, space 0, times 0 [ 491.272021][ T4310] CPU: 0 PID: 4310 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 491.272048][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 491.272063][ T4310] Call Trace: [ 491.272071][ T4310] [ 491.272079][ T4310] dump_stack_lvl+0x125/0x1b0 [ 491.272118][ T4310] should_fail_ex+0x496/0x5b0 [ 491.272154][ T4310] ? kvasprintf_const+0x66/0x190 [ 491.272181][ T4310] ? kvasprintf_const+0x66/0x190 [ 491.272206][ T4310] should_failslab+0x9/0x20 [ 491.272238][ T4310] __kmem_cache_alloc_node+0x5f/0x470 [ 491.272264][ T4310] ? pointer+0xbf0/0xbf0 [ 491.272287][ T4310] ? kvasprintf_const+0x66/0x190 [ 491.272311][ T4310] __kmalloc_node_track_caller+0x50/0x100 [ 491.272342][ T4310] kvasprintf+0xbd/0x150 [ 491.272375][ T4310] ? bust_spinlocks+0xe0/0xe0 [ 491.272403][ T4310] ? trace_contention_end+0xd6/0x100 [ 491.272430][ T4310] ? __mutex_lock+0x25b/0x1340 [ 491.272468][ T4310] kvasprintf_const+0x66/0x190 [ 491.272496][ T4310] kobject_set_name_vargs+0x5a/0x130 [ 491.272521][ T4310] dev_set_name+0xc8/0x100 [ 491.272551][ T4310] ? device_initialize+0x510/0x510 [ 491.272578][ T4310] ? __init_waitqueue_head+0xca/0x150 [ 491.272606][ T4310] rfkill_register+0xeb/0xb00 [ 491.272630][ T4310] nfc_register_device+0x11f/0x3c0 [ 491.272661][ T4310] nci_register_device+0x7f4/0xb80 [ 491.272693][ T4310] ? nci_init_complete_req+0x410/0x410 [ 491.272718][ T4310] ? lockdep_init_map_type+0x16d/0x7c0 [ 491.272753][ T4310] virtual_ncidev_open+0x147/0x220 [ 491.272791][ T4310] ? virtual_ncidev_read+0x4e0/0x4e0 [ 491.272821][ T4310] misc_open+0x3da/0x4c0 [ 491.272844][ T4310] ? misc_devnode+0x120/0x120 [ 491.272864][ T4310] chrdev_open+0x277/0x700 [ 491.272887][ T4310] ? __unregister_chrdev+0x100/0x100 [ 491.272909][ T4310] ? fsnotify_perm.part.0+0x25d/0x630 [ 491.272937][ T4310] ? fsnotify_perm.part.0+0x268/0x630 [ 491.272966][ T4310] do_dentry_open+0x88b/0x1730 [ 491.272989][ T4310] ? __unregister_chrdev+0x100/0x100 [ 491.273012][ T4310] ? may_open+0x1f2/0x400 [ 491.273043][ T4310] path_openat+0x19af/0x29c0 [ 491.273067][ T4310] ? path_lookupat+0x770/0x770 [ 491.273103][ T4310] do_filp_open+0x1de/0x430 [ 491.273125][ T4310] ? may_open_dev+0xf0/0xf0 [ 491.273145][ T4310] ? expand_files+0x442/0x910 [ 491.273176][ T4310] ? _raw_spin_unlock+0x28/0x40 [ 491.273203][ T4310] ? alloc_fd+0x2da/0x6c0 [ 491.273230][ T4310] do_sys_openat2+0x176/0x1e0 [ 491.273255][ T4310] ? build_open_flags+0x690/0x690 [ 491.273282][ T4310] __x64_sys_openat+0x175/0x210 [ 491.273308][ T4310] ? __ia32_sys_open+0x1e0/0x1e0 [ 491.273332][ T4310] ? ksys_write+0x1a7/0x250 [ 491.273359][ T4310] ? rcu_is_watching+0x12/0xb0 [ 491.273387][ T4310] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 491.273414][ T4310] do_syscall_64+0x38/0xb0 [ 491.273446][ T4310] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 491.273480][ T4310] RIP: 0033:0x7fafba27cae9 [ 491.273496][ T4310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 491.273517][ T4310] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 491.273541][ T4310] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 491.273557][ T4310] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 491.273572][ T4310] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 491.273587][ T4310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 491.273601][ T4310] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 491.273618][ T4310] [ 491.276682][ T4310] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 492.157971][ T4310] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 492.166491][ T4310] CPU: 0 PID: 4310 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 492.176744][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 492.186799][ T4310] RIP: 0010:strchr+0x1b/0xb0 [ 492.191420][ T4310] Code: 3b ad f7 48 8b 74 24 08 48 8b 14 24 eb 89 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 83 ec 10 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 51 0f b6 07 89 [ 492.211119][ T4310] RSP: 0018:ffffc9000a5775f0 EFLAGS: 00010286 [ 492.217190][ T4310] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90003b42000 [ 492.225162][ T4310] RDX: 0000000000000000 RSI: 0000000000000025 RDI: 0000000000000000 [ 492.233130][ T4310] RBP: ffffc9000a577680 R08: 0000000000000001 R09: 0000000000000000 [ 492.241102][ T4310] R10: 0000000000000001 R11: fffffffffffdfa80 R12: ffffc9000a577680 [ 492.249087][ T4310] R13: 0000000000000cc0 R14: ffff888071cb7018 R15: 0000000000000001 [ 492.257070][ T4310] FS: 00007fafbafaa6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 492.266009][ T4310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.272625][ T4310] CR2: 00007fab0a4c56be CR3: 0000000053698000 CR4: 00000000003506f0 [ 492.280684][ T4310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 492.288741][ T4310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 492.296712][ T4310] Call Trace: [ 492.299986][ T4310] [ 492.302919][ T4310] ? show_regs+0x8f/0xa0 [ 492.307172][ T4310] ? die_addr+0x4f/0xd0 [ 492.311327][ T4310] ? exc_general_protection+0x154/0x230 [ 492.316889][ T4310] ? asm_exc_general_protection+0x26/0x30 [ 492.322625][ T4310] ? strchr+0x1b/0xb0 [ 492.326706][ T4310] ? lock_release+0x4bf/0x680 [ 492.331417][ T4310] kvasprintf_const+0x25/0x190 [ 492.336191][ T4310] kobject_set_name_vargs+0x5a/0x130 [ 492.341661][ T4310] kobject_add+0x12a/0x240 [ 492.346949][ T4310] ? kset_create_and_add+0x190/0x190 [ 492.352322][ T4310] ? do_raw_spin_unlock+0x173/0x230 [ 492.357530][ T4310] ? kobject_put+0xbe/0x440 [ 492.362044][ T4310] device_add+0x290/0x1ac0 [ 492.366474][ T4310] ? device_initialize+0x510/0x510 [ 492.371592][ T4310] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 492.378542][ T4310] ? __init_waitqueue_head+0xca/0x150 [ 492.383922][ T4310] rfkill_register+0x1a9/0xb00 [ 492.388691][ T4310] nfc_register_device+0x11f/0x3c0 [ 492.393811][ T4310] nci_register_device+0x7f4/0xb80 [ 492.398959][ T4310] ? nci_init_complete_req+0x410/0x410 [ 492.404423][ T4310] ? lockdep_init_map_type+0x16d/0x7c0 [ 492.409931][ T4310] virtual_ncidev_open+0x147/0x220 [ 492.415061][ T4310] ? virtual_ncidev_read+0x4e0/0x4e0 [ 492.420361][ T4310] misc_open+0x3da/0x4c0 [ 492.424610][ T4310] ? misc_devnode+0x120/0x120 [ 492.429287][ T4310] chrdev_open+0x277/0x700 [ 492.433704][ T4310] ? __unregister_chrdev+0x100/0x100 [ 492.438989][ T4310] ? fsnotify_perm.part.0+0x25d/0x630 [ 492.444456][ T4310] ? fsnotify_perm.part.0+0x268/0x630 [ 492.449835][ T4310] do_dentry_open+0x88b/0x1730 [ 492.454606][ T4310] ? __unregister_chrdev+0x100/0x100 [ 492.459894][ T4310] ? may_open+0x1f2/0x400 [ 492.464237][ T4310] path_openat+0x19af/0x29c0 [ 492.468839][ T4310] ? path_lookupat+0x770/0x770 [ 492.473616][ T4310] do_filp_open+0x1de/0x430 [ 492.478118][ T4310] ? may_open_dev+0xf0/0xf0 [ 492.482618][ T4310] ? expand_files+0x442/0x910 [ 492.487390][ T4310] ? _raw_spin_unlock+0x28/0x40 [ 492.492248][ T4310] ? alloc_fd+0x2da/0x6c0 [ 492.496580][ T4310] do_sys_openat2+0x176/0x1e0 [ 492.501259][ T4310] ? build_open_flags+0x690/0x690 [ 492.506294][ T4310] __x64_sys_openat+0x175/0x210 [ 492.511190][ T4310] ? __ia32_sys_open+0x1e0/0x1e0 [ 492.516145][ T4310] ? ksys_write+0x1a7/0x250 [ 492.520668][ T4310] ? rcu_is_watching+0x12/0xb0 [ 492.525433][ T4310] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 492.531418][ T4310] do_syscall_64+0x38/0xb0 [ 492.535846][ T4310] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 492.541751][ T4310] RIP: 0033:0x7fafba27cae9 [ 492.546168][ T4310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 09:47:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/143) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x3) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f00000000c0)) [ 492.565953][ T4310] RSP: 002b:00007fafbafaa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 492.574366][ T4310] RAX: ffffffffffffffda RBX: 00007fafba39bf80 RCX: 00007fafba27cae9 [ 492.582341][ T4310] RDX: 0000000000000002 RSI: 0000000020000dc0 RDI: ffffffffffffff9c [ 492.590919][ T4310] RBP: 00007fafbafaa120 R08: 0000000000000000 R09: 0000000000000000 [ 492.598892][ T4310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 492.607133][ T4310] R13: 000000000000000b R14: 00007fafba39bf80 R15: 00007ffd4540d648 [ 492.615195][ T4310] [ 492.618207][ T4310] Modules linked in: [ 492.629471][ T4310] ---[ end trace 0000000000000000 ]--- [ 492.635514][ T4310] RIP: 0010:strchr+0x1b/0xb0 [ 492.647933][ T4310] Code: 3b ad f7 48 8b 74 24 08 48 8b 14 24 eb 89 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 83 ec 10 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 51 0f b6 07 89 [ 492.680365][ T4310] RSP: 0018:ffffc9000a5775f0 EFLAGS: 00010286 [ 492.686968][ T4310] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90003b42000 [ 492.695146][ T4310] RDX: 0000000000000000 RSI: 0000000000000025 RDI: 0000000000000000 [ 492.704062][ T4310] RBP: ffffc9000a577680 R08: 0000000000000001 R09: 0000000000000000 [ 492.718101][ T4310] R10: 0000000000000001 R11: fffffffffffdfa80 R12: ffffc9000a577680 [ 492.739439][ T4310] R13: 0000000000000cc0 R14: ffff888071cb7018 R15: 0000000000000001 [ 492.748116][ T4310] FS: 00007fafbafaa6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 492.764860][ T4310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.771602][ T4310] CR2: 00005586146c0680 CR3: 0000000053698000 CR4: 00000000003506e0 [ 492.779976][ T4310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 492.788093][ T4310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 492.796193][ T4310] Kernel panic - not syncing: Fatal exception [ 492.802531][ T4310] Kernel Offset: disabled [ 492.806843][ T4310] Rebooting in 86400 seconds..