fff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 762.422641] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 762.444391] audit: type=1804 audit(1670206197.537:529): pid=30348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/298/bus" dev="sda1" ino=14497 res=1 [ 762.524106] audit: type=1804 audit(1670206197.547:530): pid=30351 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/548/bus" dev="sda1" ino=14337 res=1 [ 762.553054] audit: type=1804 audit(1670206197.597:531): pid=30348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/298/bus" dev="sda1" ino=14497 res=1 02:09:57 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, 0x0, 0x0) 02:09:57 executing program 4: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:57 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0xfffffffe, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:09:57 executing program 4: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:57 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 762.769028] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:09:57 executing program 4: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 762.811715] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:09:58 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x3000000000000000, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 762.937690] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:09:58 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:58 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:09:58 executing program 4: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:58 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0xbfffffffffffff7f, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 763.194546] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:09:58 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:09:58 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) 02:09:58 executing program 4: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) getpgid(0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:58 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:09:58 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:58 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:09:58 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) 02:09:58 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:09:58 executing program 4: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:58 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:59 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) 02:09:59 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:59 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:59 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:09:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000001c0)=""/102, 0x0, 0x66}, 0x20) 02:09:59 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:59 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) 02:09:59 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:09:59 executing program 4: r0 = open(0x0, 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:59 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:09:59 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:09:59 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) 02:09:59 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000740)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x18}}, 0x0) 02:09:59 executing program 4: r0 = open(0x0, 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:59 executing program 4: r0 = open(0x0, 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:59 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) 02:09:59 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:09:59 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:00 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:00 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0x5, 0x0, 0x0) 02:10:00 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:00 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:00 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:00 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:00 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001440)={0x20, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}}, 0x0) 02:10:00 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:00 executing program 0: r0 = syz_open_dev$loop(0xfffffffffffffffc, 0x0, 0x121441) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 02:10:00 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:00 executing program 0: clock_adjtime(0x0, &(0x7f0000000000)={0x45f9}) 02:10:00 executing program 4: open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r0, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:01 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040), &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8) 02:10:01 executing program 4: open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r0, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:01 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:01 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200), 0x0) 02:10:01 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x5}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:01 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200), 0x0) 02:10:01 executing program 0: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 02:10:01 executing program 4: open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r0, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 766.617345] net_ratelimit: 10 callbacks suppressed [ 766.617355] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:01 executing program 0: capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000280)) 02:10:01 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200), 0x0) 02:10:01 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 766.741760] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 766.788907] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 766.823001] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:02 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:02 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:02 executing program 0: r0 = socket(0x2, 0x3, 0x100) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 02:10:02 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:02 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040), &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:02 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:02 executing program 0: r0 = syz_open_dev$loop(0xfffffffffffffffc, 0x0, 0x121441) ioctl$IOC_PR_RELEASE(r0, 0x6611, 0x0) [ 767.587523] kauditd_printk_skb: 35 callbacks suppressed [ 767.587536] audit: type=1804 audit(1670206202.698:567): pid=30650 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/316/bus" dev="sda1" ino=15154 res=1 [ 767.619949] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:02 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:02 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 767.647954] audit: type=1804 audit(1670206202.748:568): pid=30658 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/559/bus" dev="sda1" ino=15137 res=1 02:10:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1}, 0x4) [ 767.736814] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:02 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:02 executing program 0: recvmsg$unix(0xffffffffffffffff, 0x0, 0xc0010062) [ 767.772207] audit: type=1804 audit(1670206202.748:569): pid=30650 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/316/bus" dev="sda1" ino=15154 res=1 [ 767.803846] audit: type=1804 audit(1670206202.848:570): pid=30664 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/317/bus" dev="sda1" ino=14897 res=1 [ 767.889692] audit: type=1804 audit(1670206202.878:571): pid=30664 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/317/bus" dev="sda1" ino=14897 res=1 [ 767.913917] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 767.937377] audit: type=1804 audit(1670206202.958:572): pid=30673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/560/bus" dev="sda1" ino=15154 res=1 02:10:03 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:03 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:03 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x28000, 0x0) 02:10:03 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 768.394637] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:03 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040), &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:03 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:03 executing program 0: pselect6(0x40, &(0x7f0000000340), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000280)={&(0x7f0000000240), 0x6b}) 02:10:03 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:03 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 768.428348] audit: type=1804 audit(1670206203.538:573): pid=30696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/561/bus" dev="sda1" ino=14897 res=1 02:10:03 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x3, 0x0, 0x98, &(0x7f0000000180)={0x0, 0x0, 0x11}}) 02:10:03 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 768.545223] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:03 executing program 0: r0 = syz_open_dev$loop(0xfffffffffffffffc, 0x0, 0x121441) ioctl$IOC_PR_RELEASE(r0, 0x660c, 0x0) [ 768.662816] audit: type=1804 audit(1670206203.778:574): pid=30720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/321/bus" dev="sda1" ino=14785 res=1 [ 768.717965] audit: type=1804 audit(1670206203.818:575): pid=30723 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/562/bus" dev="sda1" ino=15185 res=1 02:10:04 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:04 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:04 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 02:10:04 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 769.069881] audit: type=1804 audit(1670206204.178:576): pid=30733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/322/bus" dev="sda1" ino=15578 res=1 02:10:04 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, 0x0, 0x0) 02:10:04 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:04 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9205, 0x0) 02:10:04 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:04 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:04 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:04 executing program 0: pipe2$9p(&(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RGETLOCK(r0, 0x0, 0x0) 02:10:04 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:04 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 769.512483] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:04 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:04 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_gettime(r0, &(0x7f0000000580)) 02:10:04 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 769.749219] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:05 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, 0x0, 0x0) 02:10:05 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000080), 0x4c) 02:10:05 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:05 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:05 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:05 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:05 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0x31, 0x0, 0x0) 02:10:05 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:05 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040), 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:05 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0x42, 0x0, 0x4) 02:10:05 executing program 5: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007ffb) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:05 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xc}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:06 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, 0x0, 0x0) 02:10:06 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040), 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) 02:10:06 executing program 5: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:06 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:06 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:06 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040), 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:06 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:06 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0x33, 0x0, 0x0) 02:10:06 executing program 5: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:06 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:06 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0x23, 0x0, 0x0) [ 771.660779] net_ratelimit: 3 callbacks suppressed [ 771.660789] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:07 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) 02:10:07 executing program 5: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:07 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:07 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:07 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:07 executing program 5: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:07 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 772.459649] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:07 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x11}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:07 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:07 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) 02:10:07 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:07 executing program 5: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 772.608458] kauditd_printk_skb: 18 callbacks suppressed [ 772.608473] audit: type=1804 audit(1670206207.718:595): pid=30936 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/332/bus" dev="sda1" ino=15583 res=1 [ 772.623615] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:07 executing program 5: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 772.741018] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 772.783257] audit: type=1804 audit(1670206207.738:596): pid=30932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/571/bus" dev="sda1" ino=15604 res=1 02:10:07 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) 02:10:08 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 772.865830] audit: type=1804 audit(1670206207.768:597): pid=30932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/571/bus" dev="sda1" ino=15604 res=1 [ 772.904819] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:08 executing program 5: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) getpgid(0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 772.958891] audit: type=1804 audit(1670206207.858:598): pid=30949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/572/bus" dev="sda1" ino=15611 res=1 02:10:08 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:08 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 773.059870] audit: type=1804 audit(1670206207.868:599): pid=30949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/572/bus" dev="sda1" ino=15611 res=1 02:10:08 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 773.151678] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 773.203274] audit: type=1804 audit(1670206207.968:600): pid=30956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/333/bus" dev="sda1" ino=15619 res=1 [ 773.291261] audit: type=1804 audit(1670206208.008:601): pid=30960 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/573/bus" dev="sda1" ino=15288 res=1 [ 773.318391] audit: type=1804 audit(1670206208.068:602): pid=30960 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/573/bus" dev="sda1" ino=15288 res=1 [ 773.355984] audit: type=1804 audit(1670206208.158:603): pid=30969 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/334/bus" dev="sda1" ino=15288 res=1 [ 773.381337] audit: type=1804 audit(1670206208.268:604): pid=30974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/574/bus" dev="sda1" ino=15288 res=1 02:10:08 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x13}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:08 executing program 0: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007ffb) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:08 executing program 5: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:08 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:08 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:08 executing program 0: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007ffb) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:08 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 773.726133] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:08 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:09 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:09 executing program 0: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007ffb) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:09 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 773.996931] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:09 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:09 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x14}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:09 executing program 5: r0 = open(0x0, 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:09 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:09 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:09 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 774.570932] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:09 executing program 5: r0 = open(0x0, 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:09 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:09 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:09 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:09 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 774.754116] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:09 executing program 5: r0 = open(0x0, 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:10 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:10 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x15}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:10 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:10 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:10 executing program 0: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:10 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:10 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:10 executing program 0: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:10 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:10 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:10 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:10 executing program 0: open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:11 executing program 1: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x14}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:11 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:11 executing program 5: open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r0, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:11 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) faccessat(0xffffffffffffffff, 0x0, 0xa0) sendfile(r5, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:11 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) (fail_nth: 1) 02:10:11 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, 0x0, 0x0) 02:10:11 executing program 5: open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r0, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 776.487603] FAULT_INJECTION: forcing a failure. [ 776.487603] name failslab, interval 1, probability 0, space 0, times 0 [ 776.508440] CPU: 0 PID: 31149 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 776.516360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 776.525719] Call Trace: [ 776.528320] dump_stack+0x1fc/0x2ef [ 776.531968] should_fail.cold+0xa/0xf [ 776.535791] ? setup_fault_attr+0x200/0x200 [ 776.540130] ? lock_acquire+0x170/0x3c0 [ 776.544123] __should_failslab+0x115/0x180 [ 776.548380] should_failslab+0x5/0x10 [ 776.552205] kmem_cache_alloc_trace+0x284/0x380 [ 776.556889] snd_pcm_oss_change_params_locked+0x1a2/0x39d0 [ 776.562543] ? __mutex_lock+0x368/0x1190 [ 776.566628] ? snd_pcm_plugin_append+0x190/0x190 [ 776.571392] ? snd_pcm_oss_make_ready+0xc7/0x1b0 [ 776.576163] ? mutex_trylock+0x1a0/0x1a0 [ 776.580231] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 776.584997] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 776.589767] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 776.594442] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 776.599209] ? rcu_nmi_exit+0xb3/0x180 [ 776.603111] snd_pcm_oss_make_ready+0xe7/0x1b0 [ 776.607706] snd_pcm_oss_set_trigger.isra.0+0x30f/0x6e0 [ 776.613080] snd_pcm_oss_poll+0x661/0xb10 [ 776.617265] ? poll_initwait+0x170/0x170 [ 776.621327] ? snd_pcm_oss_set_trigger.isra.0+0x6e0/0x6e0 [ 776.626857] ? vivid_radio_tx_poll+0x19/0x30 [ 776.631258] ? snd_pcm_oss_set_trigger.isra.0+0x6e0/0x6e0 [ 776.636790] do_select+0x8e1/0x1610 [ 776.640427] ? select_estimate_accuracy+0x320/0x320 [ 776.645437] ? __lock_acquire+0x6de/0x3ff0 [ 776.649659] ? poll_initwait+0x170/0x170 [ 776.653714] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 776.659590] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 776.665406] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 776.671199] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 776.676990] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 776.682784] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 776.688604] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 776.694393] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 776.700181] ? rcu_nmi_exit+0xb3/0x180 [ 776.704064] ? retint_kernel+0x2d/0x2d [ 776.707944] ? core_sys_select+0x37d/0x7e0 [ 776.712170] ? memset+0x15/0x40 [ 776.715444] core_sys_select+0x3ac/0x7e0 [ 776.719507] ? __se_compat_sys_pselect6+0x4a0/0x4a0 [ 776.724520] ? __might_fault+0x11f/0x1d0 [ 776.728586] ? poll_select_set_timeout+0xd4/0x130 [ 776.733441] ? poll_select_set_timeout+0xd4/0x130 [ 776.738274] ? timespec64_add_safe+0x189/0x210 [ 776.742852] ? nsec_to_clock_t+0x30/0x30 [ 776.746904] ? ktime_get_ts64+0x2c3/0x3e0 [ 776.751047] __se_sys_pselect6+0x419/0x480 [ 776.755272] ? kern_select+0x1c0/0x1c0 [ 776.759154] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 776.764517] ? trace_hardirqs_off_caller+0x6e/0x210 [ 776.769536] ? do_syscall_64+0x21/0x620 [ 776.773508] do_syscall_64+0xf9/0x620 [ 776.777309] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 776.782498] RIP: 0033:0x7fcc9236b0d9 [ 776.786208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 776.805185] RSP: 002b:00007fcc908dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 776.812882] RAX: ffffffffffffffda RBX: 00007fcc9248af80 RCX: 00007fcc9236b0d9 [ 776.820140] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 [ 776.827395] RBP: 00007fcc908dd1d0 R08: 0000000020000200 R09: 0000000000000000 02:10:12 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) faccessat(0xffffffffffffffff, 0x0, 0xa0) sendfile(r5, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:12 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 776.834651] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 776.841906] R13: 00007fff91ea23cf R14: 00007fcc908dd300 R15: 0000000000022000 02:10:12 executing program 5: open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r0, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 776.993886] net_ratelimit: 7 callbacks suppressed [ 776.993896] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:12 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x14d}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:12 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 777.083395] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:12 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) faccessat(0xffffffffffffffff, 0x0, 0xa0) sendfile(r5, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:12 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) (fail_nth: 2) 02:10:12 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x29a}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:12 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, 0x0, 0x0) [ 777.228317] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:12 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:12 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2f6}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:12 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) (fail_nth: 1) [ 777.360436] FAULT_INJECTION: forcing a failure. [ 777.360436] name failslab, interval 1, probability 0, space 0, times 0 [ 777.418040] CPU: 1 PID: 31203 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 777.426049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 777.429168] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 777.435403] Call Trace: [ 777.448289] dump_stack+0x1fc/0x2ef [ 777.451918] should_fail.cold+0xa/0xf [ 777.455723] ? setup_fault_attr+0x200/0x200 [ 777.460044] ? lock_acquire+0x170/0x3c0 [ 777.464009] __should_failslab+0x115/0x180 [ 777.468235] should_failslab+0x5/0x10 [ 777.472022] kmem_cache_alloc_trace+0x284/0x380 [ 777.476688] snd_pcm_oss_change_params_locked+0x1d8/0x39d0 [ 777.482302] ? __mutex_lock+0x368/0x1190 [ 777.486348] ? finish_task_switch+0x118/0x760 [ 777.490826] ? _raw_spin_unlock_irq+0x24/0x80 [ 777.495397] ? snd_pcm_plugin_append+0x190/0x190 [ 777.500136] ? snd_pcm_oss_make_ready+0xc7/0x1b0 [ 777.504879] ? mutex_trylock+0x1a0/0x1a0 [ 777.508932] ? finish_task_switch+0x118/0x760 [ 777.513422] ? __pollwait+0x255/0x430 [ 777.517213] ? snd_pcm_stream_unlock_irq+0xa8/0xd0 [ 777.522222] snd_pcm_oss_make_ready+0xe7/0x1b0 [ 777.526796] snd_pcm_oss_set_trigger.isra.0+0x30f/0x6e0 [ 777.532152] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 777.536726] snd_pcm_oss_poll+0x661/0xb10 [ 777.540863] ? poll_initwait+0x170/0x170 [ 777.544912] ? snd_pcm_oss_set_trigger.isra.0+0x6e0/0x6e0 [ 777.550442] ? vivid_radio_tx_poll+0x19/0x30 [ 777.554844] ? snd_pcm_oss_set_trigger.isra.0+0x6e0/0x6e0 [ 777.560370] do_select+0x8e1/0x1610 [ 777.564054] ? select_estimate_accuracy+0x320/0x320 [ 777.569064] ? __lock_acquire+0x6de/0x3ff0 [ 777.573285] ? poll_initwait+0x170/0x170 [ 777.577337] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 777.583125] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 777.588913] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 777.594707] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 777.600495] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 777.606284] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 777.612076] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 777.617950] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 777.623750] ? lock_downgrade+0x720/0x720 [ 777.627887] ? lock_acquire+0x170/0x3c0 [ 777.631847] ? __might_fault+0xef/0x1d0 [ 777.635817] ? __might_fault+0x192/0x1d0 [ 777.639871] core_sys_select+0x3ac/0x7e0 [ 777.643928] ? __se_compat_sys_pselect6+0x4a0/0x4a0 [ 777.648943] ? __might_fault+0x11f/0x1d0 [ 777.652995] ? poll_select_set_timeout+0xd4/0x130 [ 777.657833] ? poll_select_set_timeout+0xd4/0x130 [ 777.662674] ? timespec64_add_safe+0x189/0x210 [ 777.667243] ? nsec_to_clock_t+0x30/0x30 [ 777.671293] ? ktime_get_ts64+0x2c3/0x3e0 [ 777.675440] __se_sys_pselect6+0x419/0x480 [ 777.679668] ? kern_select+0x1c0/0x1c0 [ 777.683637] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 777.688992] ? trace_hardirqs_off_caller+0x6e/0x210 [ 777.693998] ? do_syscall_64+0x21/0x620 [ 777.697961] do_syscall_64+0xf9/0x620 [ 777.701754] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 777.706933] RIP: 0033:0x7fcc9236b0d9 [ 777.710638] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 777.729524] RSP: 002b:00007fcc908dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 777.737305] RAX: ffffffffffffffda RBX: 00007fcc9248af80 RCX: 00007fcc9236b0d9 [ 777.744571] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 [ 777.751833] RBP: 00007fcc908dd1d0 R08: 0000000020000200 R09: 0000000000000000 [ 777.759095] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 02:10:12 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 777.766353] R13: 00007fff91ea23cf R14: 00007fcc908dd300 R15: 0000000000022000 [ 777.777040] kauditd_printk_skb: 46 callbacks suppressed [ 777.777054] audit: type=1804 audit(1670206212.898:651): pid=31212 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/587/bus" dev="sda1" ino=15636 res=1 02:10:13 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x300}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:13 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 777.923503] audit: type=1804 audit(1670206213.038:652): pid=31225 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/347/bus" dev="sda1" ino=15345 res=1 [ 777.950792] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:13 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:13 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x500}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 778.038290] audit: type=1804 audit(1670206213.148:653): pid=31237 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/347/bus" dev="sda1" ino=15345 res=1 [ 778.064841] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:13 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x10, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 778.092227] audit: type=1804 audit(1670206213.178:654): pid=31239 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/588/bus" dev="sda1" ino=15636 res=1 02:10:13 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) (fail_nth: 3) 02:10:13 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:13 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, 0x0, 0x0) [ 778.185461] audit: type=1804 audit(1670206213.258:655): pid=31239 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/588/bus" dev="sda1" ino=15636 res=1 02:10:13 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x600}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:13 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 778.302383] FAULT_INJECTION: forcing a failure. [ 778.302383] name failslab, interval 1, probability 0, space 0, times 0 [ 778.322183] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 778.352845] CPU: 0 PID: 31255 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 778.360771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 778.370132] Call Trace: [ 778.372737] dump_stack+0x1fc/0x2ef [ 778.376387] should_fail.cold+0xa/0xf [ 778.380199] ? setup_fault_attr+0x200/0x200 [ 778.384542] ? lock_acquire+0x170/0x3c0 [ 778.388539] __should_failslab+0x115/0x180 [ 778.392791] should_failslab+0x5/0x10 [ 778.396628] kmem_cache_alloc_trace+0x284/0x380 [ 778.401318] snd_pcm_oss_change_params_locked+0x20e/0x39d0 [ 778.406969] ? __mutex_lock+0x368/0x1190 [ 778.411046] ? snd_pcm_plugin_append+0x190/0x190 [ 778.415810] ? snd_pcm_oss_make_ready+0xc7/0x1b0 [ 778.417790] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 778.420570] ? mutex_trylock+0x1a0/0x1a0 [ 778.420590] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 778.420606] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 778.420624] ? rcu_nmi_exit+0xb3/0x180 [ 778.420639] ? retint_kernel+0x2d/0x2d [ 778.420657] snd_pcm_oss_make_ready+0xe7/0x1b0 [ 778.420673] snd_pcm_oss_set_trigger.isra.0+0x30f/0x6e0 [ 778.420688] snd_pcm_oss_poll+0x661/0xb10 [ 778.466143] ? poll_initwait+0x170/0x170 [ 778.470197] ? snd_pcm_oss_set_trigger.isra.0+0x6e0/0x6e0 [ 778.475728] ? snd_pcm_oss_set_trigger.isra.0+0x6e0/0x6e0 [ 778.481254] do_select+0x8e1/0x1610 [ 778.484888] ? select_estimate_accuracy+0x320/0x320 [ 778.489898] ? check_preemption_disabled+0x41/0x280 [ 778.494903] ? poll_initwait+0x170/0x170 [ 778.498959] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 778.504752] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 778.510545] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 778.516340] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 778.522153] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 778.527975] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 778.533773] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 778.539582] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 778.545395] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 778.550154] ? rcu_nmi_exit+0xb3/0x180 [ 778.554035] ? retint_kernel+0x2d/0x2d [ 778.557929] core_sys_select+0x3ac/0x7e0 [ 778.562071] ? __se_compat_sys_pselect6+0x4a0/0x4a0 [ 778.567081] ? __might_fault+0x11f/0x1d0 [ 778.571239] ? poll_select_set_timeout+0xd4/0x130 [ 778.576077] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 778.580824] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 778.585402] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 778.590151] ? rcu_nmi_exit+0xb3/0x180 [ 778.594030] ? retint_kernel+0x2d/0x2d [ 778.597938] ? __se_sys_pselect6+0x1e2/0x480 [ 778.602340] __se_sys_pselect6+0x419/0x480 [ 778.606573] ? kern_select+0x1c0/0x1c0 [ 778.610469] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 778.615826] ? trace_hardirqs_off_caller+0x6e/0x210 [ 778.620831] ? do_syscall_64+0x21/0x620 [ 778.624797] do_syscall_64+0xf9/0x620 [ 778.628593] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 778.633772] RIP: 0033:0x7fcc9236b0d9 02:10:13 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x110, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 778.637480] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 778.656369] RSP: 002b:00007fcc908dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 778.664071] RAX: ffffffffffffffda RBX: 00007fcc9248af80 RCX: 00007fcc9236b0d9 [ 778.671331] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 [ 778.678588] RBP: 00007fcc908dd1d0 R08: 0000000020000200 R09: 0000000000000000 [ 778.685845] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 778.693103] R13: 00007fff91ea23cf R14: 00007fcc908dd300 R15: 0000000000022000 02:10:13 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:13 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:13 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x700}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:13 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) (fail_nth: 4) 02:10:13 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 778.910888] FAULT_INJECTION: forcing a failure. [ 778.910888] name failslab, interval 1, probability 0, space 0, times 0 [ 778.923315] audit: type=1804 audit(1670206214.028:656): pid=31284 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/348/bus" dev="sda1" ino=15652 res=1 [ 778.928176] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 778.960116] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 778.974804] CPU: 1 PID: 31286 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 778.982716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 778.992073] Call Trace: [ 778.994673] dump_stack+0x1fc/0x2ef [ 778.998306] should_fail.cold+0xa/0xf [ 779.002186] ? setup_fault_attr+0x200/0x200 [ 779.006496] ? lock_acquire+0x170/0x3c0 [ 779.010466] __should_failslab+0x115/0x180 [ 779.014692] should_failslab+0x5/0x10 [ 779.018479] __kmalloc+0x2ab/0x3c0 [ 779.022010] ? constrain_params_by_rules+0x10e/0x10b0 [ 779.027191] constrain_params_by_rules+0x10e/0x10b0 [ 779.032207] ? snd_pcm_hw_convert_to_old_params+0x570/0x570 [ 779.037906] ? kasan_kmalloc+0x139/0x160 [ 779.041968] ? kmem_cache_alloc_trace+0x12f/0x380 [ 779.046809] ? snd_pcm_oss_change_params_locked+0x20e/0x39d0 [ 779.052593] ? snd_pcm_oss_make_ready+0xe7/0x1b0 [ 779.057337] ? snd_pcm_oss_set_trigger.isra.0+0x30f/0x6e0 [ 779.062860] ? snd_pcm_oss_poll+0x661/0xb10 [ 779.067168] ? do_select+0x8e1/0x1610 [ 779.070953] ? core_sys_select+0x3ac/0x7e0 [ 779.075173] ? __se_sys_pselect6+0x419/0x480 [ 779.079567] ? do_syscall_64+0xf9/0x620 [ 779.083529] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 779.088886] ? get_reg+0x1f0/0x1f0 [ 779.092419] ? mark_held_locks+0xf0/0xf0 [ 779.096473] ? check_preemption_disabled+0x41/0x280 [ 779.101486] ? snd_interval_refine+0x2c8/0x560 [ 779.106057] snd_pcm_hw_refine+0xb9b/0xed0 [ 779.110291] ? snd_pcm_do_prepare+0xa0/0xa0 [ 779.114609] ? setup_fault_attr+0x200/0x200 [ 779.119179] ? lock_acquire+0x170/0x3c0 [ 779.123143] ? check_preemption_disabled+0x41/0x280 [ 779.128152] ? memset+0x20/0x40 [ 779.131419] ? _snd_pcm_hw_param_min+0x24f/0x4c0 [ 779.136170] snd_pcm_oss_change_params_locked+0xf2a/0x39d0 [ 779.141795] ? snd_pcm_plugin_append+0x190/0x190 [ 779.146538] ? snd_pcm_oss_make_ready+0xc7/0x1b0 [ 779.151280] ? mutex_trylock+0x1a0/0x1a0 [ 779.155339] ? __pollwait+0x255/0x430 [ 779.159138] ? snd_pcm_stream_unlock_irq+0xa8/0xd0 [ 779.164059] snd_pcm_oss_make_ready+0xe7/0x1b0 [ 779.168631] snd_pcm_oss_set_trigger.isra.0+0x30f/0x6e0 [ 779.173984] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 779.178559] snd_pcm_oss_poll+0x661/0xb10 [ 779.182704] ? poll_initwait+0x170/0x170 [ 779.186756] ? snd_pcm_oss_set_trigger.isra.0+0x6e0/0x6e0 [ 779.192285] ? vivid_radio_tx_poll+0x19/0x30 [ 779.196704] ? snd_pcm_oss_set_trigger.isra.0+0x6e0/0x6e0 [ 779.202236] do_select+0x8e1/0x1610 [ 779.205874] ? select_estimate_accuracy+0x320/0x320 [ 779.210971] ? __lock_acquire+0x6de/0x3ff0 [ 779.215193] ? poll_initwait+0x170/0x170 [ 779.219257] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 779.225054] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 779.230850] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 779.236726] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 779.242515] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 779.248419] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 779.254205] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 779.260081] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 779.265873] ? lock_downgrade+0x720/0x720 [ 779.270007] ? lock_acquire+0x170/0x3c0 [ 779.273967] ? __might_fault+0xef/0x1d0 [ 779.277933] ? __might_fault+0x192/0x1d0 [ 779.281988] core_sys_select+0x3ac/0x7e0 [ 779.286039] ? __se_compat_sys_pselect6+0x4a0/0x4a0 [ 779.291042] ? __might_fault+0x11f/0x1d0 [ 779.295093] ? poll_select_set_timeout+0xd4/0x130 [ 779.299925] ? poll_select_set_timeout+0xd4/0x130 [ 779.304759] ? timespec64_add_safe+0x189/0x210 [ 779.309327] ? nsec_to_clock_t+0x30/0x30 [ 779.313385] ? ktime_get_ts64+0x2c3/0x3e0 [ 779.317528] __se_sys_pselect6+0x419/0x480 [ 779.321757] ? kern_select+0x1c0/0x1c0 [ 779.325641] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 779.330995] ? trace_hardirqs_off_caller+0x6e/0x210 [ 779.335996] ? do_syscall_64+0x21/0x620 [ 779.339956] do_syscall_64+0xf9/0x620 [ 779.343756] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 779.348927] RIP: 0033:0x7fcc9236b0d9 [ 779.352627] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 779.371881] RSP: 002b:00007fcc908dd168 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 779.379572] RAX: ffffffffffffffda RBX: 00007fcc9248af80 RCX: 00007fcc9236b0d9 [ 779.386825] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 [ 779.394080] RBP: 00007fcc908dd1d0 R08: 0000000020000200 R09: 0000000000000000 [ 779.401364] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 02:10:14 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:14 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x4000, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:14 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) [ 779.408621] R13: 00007fff91ea23cf R14: 00007fcc908dd300 R15: 0000000000022000 02:10:14 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 779.500641] audit: type=1804 audit(1670206214.618:657): pid=31284 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/348/bus" dev="sda1" ino=15652 res=1 02:10:14 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x401f, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:14 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) 02:10:14 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:14 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0xfffffffe, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 779.653540] audit: type=1804 audit(1670206214.769:658): pid=31318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/349/bus" dev="sda1" ino=15613 res=1 02:10:14 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:14 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) [ 779.771773] audit: type=1804 audit(1670206214.859:659): pid=31325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/349/bus" dev="sda1" ino=15613 res=1 02:10:15 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:15 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:15 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:15 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x1010000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:15 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 779.909220] audit: type=1804 audit(1670206215.009:660): pid=31338 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/592/bus" dev="sda1" ino=15384 res=1 02:10:15 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) (fail_nth: 1) 02:10:15 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xc00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:15 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:15 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:15 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0xff7fffffffffff7f, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 780.156468] FAULT_INJECTION: forcing a failure. [ 780.156468] name failslab, interval 1, probability 0, space 0, times 0 [ 780.208172] CPU: 1 PID: 31364 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 780.216093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 780.225450] Call Trace: [ 780.228051] dump_stack+0x1fc/0x2ef [ 780.231694] should_fail.cold+0xa/0xf [ 780.235509] ? setup_fault_attr+0x200/0x200 [ 780.239843] ? lock_acquire+0x1ec/0x3c0 [ 780.243831] __should_failslab+0x115/0x180 [ 780.248077] should_failslab+0x5/0x10 [ 780.251886] kmem_cache_alloc_trace+0x284/0x380 [ 780.256564] snd_pcm_oss_change_params_locked+0x1a2/0x39d0 [ 780.262209] ? __mutex_lock+0x368/0x1190 [ 780.266329] ? snd_pcm_plugin_append+0x190/0x190 [ 780.271093] ? snd_pcm_oss_make_ready+0xc7/0x1b0 [ 780.275854] ? mutex_trylock+0x1a0/0x1a0 [ 780.279926] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 780.284514] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 780.289285] ? rcu_nmi_exit+0xb3/0x180 [ 780.293195] ? retint_kernel+0x2d/0x2d [ 780.297099] snd_pcm_oss_make_ready+0xe7/0x1b0 [ 780.301697] snd_pcm_oss_set_trigger.isra.0+0x30f/0x6e0 02:10:15 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 780.307072] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 780.311665] snd_pcm_oss_poll+0x661/0xb10 [ 780.315825] ? poll_initwait+0x170/0x170 [ 780.319899] ? snd_pcm_oss_set_trigger.isra.0+0x6e0/0x6e0 [ 780.325450] ? vivid_radio_tx_poll+0x19/0x30 [ 780.329874] ? snd_pcm_oss_set_trigger.isra.0+0x6e0/0x6e0 [ 780.335415] do_select+0x8e1/0x1610 [ 780.339073] ? select_estimate_accuracy+0x320/0x320 [ 780.344098] ? event_sched_in+0x700/0xdb0 [ 780.348256] ? poll_initwait+0x170/0x170 [ 780.352338] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 02:10:15 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 780.358146] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 780.363959] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 780.369775] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 780.375591] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 780.381401] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 780.387213] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 780.393017] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 780.397785] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 780.402375] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 780.407143] ? rcu_nmi_exit+0xb3/0x180 [ 780.411043] ? retint_kernel+0x2d/0x2d [ 780.414948] core_sys_select+0x3ac/0x7e0 [ 780.419022] ? __se_compat_sys_pselect6+0x4a0/0x4a0 [ 780.424048] ? retint_kernel+0x2d/0x2d [ 780.427950] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 780.432541] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 780.437316] ? retint_kernel+0x2d/0x2d [ 780.441219] ? timespec64_add_safe+0x189/0x210 [ 780.445810] ? nsec_to_clock_t+0x30/0x30 [ 780.449885] ? ktime_get_ts64+0x2c3/0x3e0 [ 780.454052] __se_sys_pselect6+0x419/0x480 [ 780.458306] ? kern_select+0x1c0/0x1c0 [ 780.462210] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 780.467571] ? trace_hardirqs_off_caller+0x6e/0x210 [ 780.472570] ? do_syscall_64+0x21/0x620 [ 780.476526] do_syscall_64+0xf9/0x620 [ 780.480315] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 780.485484] RIP: 0033:0x7fa0c25e70d9 [ 780.489178] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 780.508060] RSP: 002b:00007fa0c0b59168 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 780.515767] RAX: ffffffffffffffda RBX: 00007fa0c2706f80 RCX: 00007fa0c25e70d9 [ 780.523015] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 [ 780.530275] RBP: 00007fa0c0b591d0 R08: 0000000020000200 R09: 0000000000000000 [ 780.537527] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 780.544778] R13: 00007ffd3e71f1af R14: 00007fa0c0b59300 R15: 0000000000022000 02:10:15 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:15 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:15 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:15 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x8, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:15 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) (fail_nth: 2) 02:10:15 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040), 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 780.790970] FAULT_INJECTION: forcing a failure. [ 780.790970] name failslab, interval 1, probability 0, space 0, times 0 [ 780.826384] CPU: 1 PID: 31403 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 780.834312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 780.843674] Call Trace: [ 780.846283] dump_stack+0x1fc/0x2ef [ 780.850012] should_fail.cold+0xa/0xf [ 780.853830] ? setup_fault_attr+0x200/0x200 [ 780.858162] ? lock_acquire+0x170/0x3c0 [ 780.862157] __should_failslab+0x115/0x180 [ 780.866405] should_failslab+0x5/0x10 [ 780.870219] kmem_cache_alloc_trace+0x284/0x380 [ 780.874906] snd_pcm_oss_change_params_locked+0x1d8/0x39d0 [ 780.880551] ? __mutex_lock+0x368/0x1190 [ 780.884644] ? snd_pcm_plugin_append+0x190/0x190 [ 780.889504] ? snd_pcm_oss_make_ready+0xc7/0x1b0 [ 780.894273] ? mutex_trylock+0x1a0/0x1a0 [ 780.898343] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 780.903112] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 780.907884] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 780.912478] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 780.917252] ? rcu_nmi_exit+0xb3/0x180 [ 780.921158] ? retint_kernel+0x2d/0x2d [ 780.925067] snd_pcm_oss_make_ready+0xe7/0x1b0 [ 780.929668] snd_pcm_oss_set_trigger.isra.0+0x30f/0x6e0 [ 780.935064] snd_pcm_oss_poll+0x661/0xb10 02:10:15 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfa0}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:16 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040), 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 780.939360] ? poll_initwait+0x170/0x170 [ 780.943443] ? snd_pcm_oss_set_trigger.isra.0+0x6e0/0x6e0 [ 780.949002] ? snd_pcm_oss_set_trigger.isra.0+0x6e0/0x6e0 [ 780.954616] do_select+0x8e1/0x1610 [ 780.958289] ? select_estimate_accuracy+0x320/0x320 [ 780.963322] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 780.968102] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 780.972692] ? poll_initwait+0x170/0x170 [ 780.976770] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 780.982589] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 780.988449] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 780.994271] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 781.000190] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 781.006097] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 781.011915] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 781.017729] ? core_sys_select+0x1bd/0x7e0 [ 781.021979] ? __might_fault+0x11f/0x1d0 [ 781.026062] ? lock_downgrade+0x720/0x720 [ 781.030221] ? lock_acquire+0x170/0x3c0 [ 781.034206] ? __might_fault+0xef/0x1d0 [ 781.038196] ? __might_fault+0x192/0x1d0 02:10:16 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:16 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040), 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 781.042277] core_sys_select+0x3ac/0x7e0 [ 781.046341] ? __se_compat_sys_pselect6+0x4a0/0x4a0 [ 781.051373] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 781.056133] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 781.060706] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 781.065465] ? retint_kernel+0x2d/0x2d [ 781.069372] ? timespec64_add_safe+0x189/0x210 [ 781.073961] ? nsec_to_clock_t+0x30/0x30 [ 781.078030] ? ktime_get_ts64+0x2c3/0x3e0 [ 781.082194] __se_sys_pselect6+0x419/0x480 [ 781.086438] ? kern_select+0x1c0/0x1c0 [ 781.090349] ? rcu_nmi_exit+0xb3/0x180 [ 781.094257] ? do_syscall_64+0xbf/0x620 [ 781.098247] do_syscall_64+0xf9/0x620 [ 781.102062] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 781.107259] RIP: 0033:0x7fa0c25e70d9 [ 781.110979] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 781.129884] RSP: 002b:00007fa0c0b59168 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 781.137603] RAX: ffffffffffffffda RBX: 00007fa0c2706f80 RCX: 00007fa0c25e70d9 [ 781.144986] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 [ 781.152261] RBP: 00007fa0c0b591d0 R08: 0000000020000200 R09: 0000000000000000 [ 781.159536] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 781.166811] R13: 00007ffd3e71f1af R14: 00007fa0c0b59300 R15: 0000000000022000 02:10:16 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1100}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:16 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:16 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:16 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:16 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:16 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1300}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:16 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:16 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:16 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1400}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:16 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:17 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:17 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1500}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:17 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 782.021206] net_ratelimit: 4 callbacks suppressed [ 782.021215] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:17 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:17 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:17 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x30, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:17 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x157c}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:17 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:17 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:17 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:17 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1f40}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:18 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:18 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 782.855800] kauditd_printk_skb: 23 callbacks suppressed [ 782.855814] audit: type=1804 audit(1670206217.969:684): pid=31541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/608/bus" dev="sda1" ino=15664 res=1 02:10:18 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:18 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:18 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x5, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 782.988149] audit: type=1804 audit(1670206218.099:685): pid=31551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/354/bus" dev="sda1" ino=15676 res=1 [ 783.037714] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 783.081582] audit: type=1804 audit(1670206218.099:686): pid=31552 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/609/bus" dev="sda1" ino=15677 res=1 02:10:18 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 783.132845] audit: type=1804 audit(1670206218.229:687): pid=31560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/354/bus" dev="sda1" ino=15676 res=1 [ 783.198149] audit: type=1804 audit(1670206218.249:688): pid=31559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/610/bus" dev="sda1" ino=15677 res=1 [ 783.238162] audit: type=1804 audit(1670206218.349:689): pid=31570 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/611/bus" dev="sda1" ino=15394 res=1 02:10:18 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x2000, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:18 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:18 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:18 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:18 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x110, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:18 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 783.680921] audit: type=1804 audit(1670206218.799:690): pid=31591 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/612/bus" dev="sda1" ino=15677 res=1 02:10:18 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:18 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x401f}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:18 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 783.786175] audit: type=1804 audit(1670206218.899:691): pid=31600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/613/bus" dev="sda1" ino=15659 res=1 02:10:19 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 783.918780] audit: type=1804 audit(1670206219.029:692): pid=31607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/614/bus" dev="sda1" ino=15682 res=1 02:10:19 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4d01}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 783.965568] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:19 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 784.005013] audit: type=1804 audit(1670206219.079:693): pid=31615 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/355/bus" dev="sda1" ino=15329 res=1 [ 784.131394] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:19 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x2100, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:19 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6400}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:19 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:19 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x2000, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:19 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:19 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7c15}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 784.631513] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:19 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9a02}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:19 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa00f}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:20 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xf602}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:20 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000b}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:20 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 784.987443] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:20 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:20 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0xfffffffe, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:20 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:20 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:20 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:20 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x4000, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:20 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 785.531113] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:20 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x3000000000000000, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:20 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:20 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x5000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:20 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:20 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:20 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 785.861056] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:21 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:21 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:21 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:21 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x401f, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:21 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:21 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 786.413867] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:21 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0xbfffffffffffff7f, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:21 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:21 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb000200}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:21 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:21 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:21 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xc000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:21 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 786.737240] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:21 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:22 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x11000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:22 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0xfffffffe, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:22 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:22 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:22 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x13000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:22 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x1010000000000000, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:22 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 787.279033] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:22 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:22 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:22 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x14000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:22 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 787.616135] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:22 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x15000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:22 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0xff7fffffffffff7f, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 787.679136] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:22 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:22 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 787.819323] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:23 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:23 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x20000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:23 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:23 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, 0xffffffffffffffff, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 788.148217] kauditd_printk_skb: 24 callbacks suppressed [ 788.148231] audit: type=1804 audit(1670206223.259:718): pid=31970 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/620/bus" dev="sda1" ino=14434 res=1 [ 788.180872] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 788.198840] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 788.220978] audit: type=1804 audit(1670206223.309:719): pid=31975 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/363/bus" dev="sda1" ino=14547 res=1 [ 788.255982] audit: type=1804 audit(1670206223.329:720): pid=31975 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/363/bus" dev="sda1" ino=14547 res=1 [ 788.285192] audit: type=1804 audit(1670206223.369:721): pid=31979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/620/bus" dev="sda1" ino=14434 res=1 02:10:23 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, 0xffffffffffffffff, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:23 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:23 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x40000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:23 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, 0xffffffffffffffff, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 788.401589] audit: type=1804 audit(1670206223.519:722): pid=31990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/364/bus" dev="sda1" ino=14498 res=1 [ 788.402968] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:23 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x401f0000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 788.467458] audit: type=1804 audit(1670206223.569:723): pid=31990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/364/bus" dev="sda1" ino=14498 res=1 02:10:23 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xe, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:23 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 788.546426] audit: type=1804 audit(1670206223.659:724): pid=32004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/365/bus" dev="sda1" ino=14450 res=1 [ 788.574893] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 788.614037] audit: type=1804 audit(1670206223.709:725): pid=32004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/365/bus" dev="sda1" ino=14450 res=1 02:10:23 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 788.648566] audit: type=1804 audit(1670206223.769:726): pid=32017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/366/bus" dev="sda1" ino=14450 res=1 [ 788.666467] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 788.704557] audit: type=1804 audit(1670206223.819:727): pid=32017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/366/bus" dev="sda1" ino=14450 res=1 02:10:24 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:24 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4d010000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:24 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:24 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 789.040110] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:24 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:24 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x5}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:24 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(0x0, 0x0) 02:10:24 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7c150000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:24 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xf, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:24 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9a020000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:24 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa00f0000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:24 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:24 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:24 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xf6020000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:24 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:25 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:25 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:25 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x11, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:25 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(0x0, 0x0) 02:10:25 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfeffffff}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:25 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xffffff7f}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:25 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfffffffe}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:25 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x12, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:25 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x5}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:25 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:25 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:25 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb0783969c8}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:25 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1d, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:26 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:26 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(0x0, 0x0) 02:10:26 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:26 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:26 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:26 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x200000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:26 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:26 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x300000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:26 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xc}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:26 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x14d, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:27 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x400000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:27 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x29a, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:27 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 02:10:27 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x300, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:27 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000071c0), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x401c5820, &(0x7f0000000100)=0xf4240) 02:10:27 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:27 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x13, 0x0, &(0x7f00000003c0)) 02:10:27 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:27 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x500000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:27 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x30a, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:27 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x11}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 792.595378] net_ratelimit: 8 callbacks suppressed [ 792.595388] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:27 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x500, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:27 executing program 4: syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x16f982) 02:10:27 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x600, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:27 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x600000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:27 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @remote}}}}}, 0x0) 02:10:27 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x700, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:28 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b49, &(0x7f0000000400)) 02:10:28 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:28 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x700000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:28 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:28 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x13}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:28 executing program 4: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1d, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:28 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa00, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 793.493187] kauditd_printk_skb: 17 callbacks suppressed [ 793.493200] audit: type=1804 audit(1670206228.609:745): pid=32360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/626/bus" dev="sda1" ino=15010 res=1 [ 793.494058] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:28 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa03, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:28 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x800000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 793.618416] audit: type=1804 audit(1670206228.739:746): pid=32360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/626/bus" dev="sda1" ino=15010 res=1 02:10:28 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb00, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:28 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd00, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:29 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:29 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xe00, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:29 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:29 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:29 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xf00, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 794.390666] audit: type=1804 audit(1670206229.509:747): pid=32403 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/627/bus" dev="sda1" ino=14770 res=1 [ 794.417898] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 794.498587] audit: type=1804 audit(1670206229.619:748): pid=32414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/627/bus" dev="sda1" ino=14770 res=1 02:10:29 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x14}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:29 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa00000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:29 executing program 4: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1d, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:29 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1100, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:29 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1200, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:29 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb00000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:29 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x157c, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:30 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:30 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1d00, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:30 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb00020000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:30 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:30 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1f00, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 795.305780] audit: type=1804 audit(1670206230.420:749): pid=32456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/628/bus" dev="sda1" ino=14770 res=1 [ 795.306454] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 795.393072] audit: type=1804 audit(1670206230.510:750): pid=32465 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/628/bus" dev="sda1" ino=14770 res=1 02:10:30 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x15}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:30 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xc00000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:30 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1f40, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:30 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x2100, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:30 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:30 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd00000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:30 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:31 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:31 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x401f, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:31 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:31 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:31 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4d01, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 796.232922] audit: type=1804 audit(1670206231.350:751): pid=32512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/629/bus" dev="sda1" ino=15237 res=1 [ 796.258806] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 796.326862] audit: type=1804 audit(1670206231.440:752): pid=32522 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/629/bus" dev="sda1" ino=15237 res=1 02:10:31 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:31 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6400, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:31 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1100000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:31 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x2100, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:31 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7c15, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:31 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1300000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:31 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xe}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:32 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:32 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9a02, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:32 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1400000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:32 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000b, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:32 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1500000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 797.153395] audit: type=1804 audit(1670206232.270:753): pid=32572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/630/bus" dev="sda1" ino=15711 res=1 [ 797.153985] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:32 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x14d}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:32 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7d000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:32 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 797.279149] audit: type=1804 audit(1670206232.370:754): pid=32579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/630/bus" dev="sda1" ino=15711 res=1 02:10:32 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 1) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:32 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:32 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xf}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:32 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x29a}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 797.577493] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 797.596347] FAULT_INJECTION: forcing a failure. [ 797.596347] name failslab, interval 1, probability 0, space 0, times 0 [ 797.607841] CPU: 0 PID: 32612 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 797.615730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 797.625082] Call Trace: [ 797.627672] dump_stack+0x1fc/0x2ef [ 797.631287] should_fail.cold+0xa/0xf [ 797.635079] ? setup_fault_attr+0x200/0x200 [ 797.639384] ? lock_acquire+0x170/0x3c0 [ 797.643344] __should_failslab+0x115/0x180 [ 797.647579] should_failslab+0x5/0x10 [ 797.651390] kmem_cache_alloc_trace+0x284/0x380 [ 797.656064] alloc_pipe_info+0xb8/0x470 [ 797.660031] splice_direct_to_actor+0x6dd/0x8d0 [ 797.664693] ? apparmor_getprocattr+0x11e0/0x11e0 [ 797.669530] ? check_preemption_disabled+0x41/0x280 [ 797.674537] ? generic_pipe_buf_nosteal+0x10/0x10 [ 797.679377] ? do_splice_to+0x160/0x160 [ 797.683348] ? security_file_permission+0x1c0/0x220 [ 797.688356] do_splice_direct+0x1a7/0x270 [ 797.692492] ? splice_direct_to_actor+0x8d0/0x8d0 [ 797.697319] ? security_file_permission+0x1c0/0x220 [ 797.702335] do_sendfile+0x550/0xc30 [ 797.706046] ? do_compat_pwritev64+0x1b0/0x1b0 [ 797.710611] ? vfs_write+0x393/0x540 [ 797.714309] __se_sys_sendfile64+0x147/0x160 [ 797.718702] ? __se_sys_sendfile+0x180/0x180 [ 797.723093] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 797.728446] ? trace_hardirqs_off_caller+0x6e/0x210 [ 797.733451] ? do_syscall_64+0x21/0x620 [ 797.737427] do_syscall_64+0xf9/0x620 [ 797.741219] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 797.746392] RIP: 0033:0x7f337636e0d9 [ 797.750090] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 797.768977] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 797.776672] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 797.783933] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 797.791188] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 797.798440] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000001 [ 797.805697] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:33 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:33 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4000000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:33 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3e8000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x300}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:33 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 2) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:33 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x400000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:33 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x800000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:33 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 798.094342] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 798.123198] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 798.154774] FAULT_INJECTION: forcing a failure. [ 798.154774] name failslab, interval 1, probability 0, space 0, times 0 [ 798.167840] CPU: 1 PID: 32635 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 798.175759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 798.185117] Call Trace: [ 798.187718] dump_stack+0x1fc/0x2ef [ 798.191362] should_fail.cold+0xa/0xf [ 798.195169] ? setup_fault_attr+0x200/0x200 [ 798.199501] ? lock_acquire+0x170/0x3c0 [ 798.203489] __should_failslab+0x115/0x180 [ 798.207753] should_failslab+0x5/0x10 [ 798.211557] __kmalloc+0x2ab/0x3c0 [ 798.215103] ? alloc_pipe_info+0x193/0x470 [ 798.219356] alloc_pipe_info+0x193/0x470 [ 798.223426] splice_direct_to_actor+0x6dd/0x8d0 [ 798.228123] ? apparmor_getprocattr+0x11e0/0x11e0 [ 798.232976] ? check_preemption_disabled+0x41/0x280 [ 798.238097] ? generic_pipe_buf_nosteal+0x10/0x10 [ 798.243039] ? do_splice_to+0x160/0x160 [ 798.247024] ? security_file_permission+0x1c0/0x220 [ 798.252053] do_splice_direct+0x1a7/0x270 [ 798.256209] ? splice_direct_to_actor+0x8d0/0x8d0 [ 798.261154] ? security_file_permission+0x1c0/0x220 [ 798.266184] do_sendfile+0x550/0xc30 [ 798.269916] ? do_compat_pwritev64+0x1b0/0x1b0 [ 798.274514] ? vfs_write+0x393/0x540 [ 798.278245] __se_sys_sendfile64+0x147/0x160 [ 798.282661] ? __se_sys_sendfile+0x180/0x180 [ 798.287076] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 798.292540] ? trace_hardirqs_off_caller+0x6e/0x210 [ 798.297578] ? do_syscall_64+0x21/0x620 [ 798.301562] do_syscall_64+0xf9/0x620 [ 798.305374] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 798.310567] RIP: 0033:0x7f337636e0d9 [ 798.311847] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 798.314280] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 798.314290] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 02:10:33 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:33 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x803e00, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:33 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x401f000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x30c}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 798.314302] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 798.314314] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 798.365917] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 798.373178] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000001 [ 798.380438] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:33 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd00700, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:33 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4d01000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:33 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:33 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 3) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x500}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:33 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 798.683449] kauditd_printk_skb: 8 callbacks suppressed [ 798.683463] audit: type=1804 audit(1670206233.800:763): pid=32688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/633/bus" dev="sda1" ino=15721 res=1 [ 798.684230] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:33 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, 0xffffffffffffffff, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:33 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6400000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 798.731533] audit: type=1804 audit(1670206233.850:764): pid=32688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/633/bus" dev="sda1" ino=15721 res=1 [ 798.742555] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 798.791641] FAULT_INJECTION: forcing a failure. [ 798.791641] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 798.803797] CPU: 1 PID: 32690 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 798.811695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 798.821059] Call Trace: [ 798.823666] dump_stack+0x1fc/0x2ef [ 798.827310] should_fail.cold+0xa/0xf [ 798.831128] ? lock_acquire+0x170/0x3c0 [ 798.835116] ? setup_fault_attr+0x200/0x200 [ 798.839465] __alloc_pages_nodemask+0x239/0x2890 [ 798.844412] ? __radix_tree_lookup+0x216/0x370 [ 798.849020] ? find_get_entry+0x4cd/0x8a0 [ 798.853182] ? lock_downgrade+0x720/0x720 [ 798.857350] ? __radix_tree_lookup+0x370/0x370 [ 798.861956] ? check_preemption_disabled+0x41/0x280 [ 798.863391] audit: type=1804 audit(1670206233.850:765): pid=32690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/384/bus" dev="sda1" ino=15726 res=1 [ 798.866989] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 798.867018] ? find_get_pages_range_tag+0xc50/0xc50 [ 798.867037] ? ondemand_readahead.isra.0+0x575/0xd40 [ 798.906200] alloc_pages_current+0x193/0x2a0 [ 798.910628] generic_file_read_iter+0x1ffb/0x2b60 [ 798.915501] ext4_file_read_iter+0x17b/0x3a0 [ 798.919929] generic_file_splice_read+0x44a/0x6d0 [ 798.924790] ? add_to_pipe+0x360/0x360 [ 798.928701] ? security_file_permission+0x1c0/0x220 [ 798.933736] ? add_to_pipe+0x360/0x360 [ 798.937814] do_splice_to+0x10e/0x160 [ 798.941631] splice_direct_to_actor+0x2b9/0x8d0 [ 798.946322] ? generic_pipe_buf_nosteal+0x10/0x10 [ 798.946807] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 798.951170] ? do_splice_to+0x160/0x160 [ 798.951193] do_splice_direct+0x1a7/0x270 [ 798.951212] ? splice_direct_to_actor+0x8d0/0x8d0 [ 798.951233] ? security_file_permission+0x1c0/0x220 [ 798.951252] do_sendfile+0x550/0xc30 [ 798.983183] ? do_compat_pwritev64+0x1b0/0x1b0 [ 798.987862] ? vfs_write+0x393/0x540 [ 798.991579] __se_sys_sendfile64+0x147/0x160 [ 798.995986] ? __se_sys_sendfile+0x180/0x180 [ 799.000388] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 799.005740] ? trace_hardirqs_off_caller+0x6e/0x210 [ 799.010747] ? do_syscall_64+0x21/0x620 [ 799.014711] do_syscall_64+0xf9/0x620 [ 799.018504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 799.023683] RIP: 0033:0x7f337636e0d9 [ 799.027388] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 799.046292] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 799.054693] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 799.061949] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 799.069203] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 799.076463] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000001 [ 799.083718] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:34 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x11}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:34 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:34 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 4) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:34 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x600}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:34 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, 0xffffffffffffffff, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:34 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7c15000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 799.222161] audit: type=1804 audit(1670206234.060:766): pid=32707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/634/bus" dev="sda1" ino=15732 res=1 02:10:34 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 799.300316] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 799.321683] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 799.346124] FAULT_INJECTION: forcing a failure. [ 799.346124] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 799.376067] audit: type=1804 audit(1670206234.220:767): pid=32696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/384/bus" dev="sda1" ino=15726 res=1 02:10:34 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, 0xffffffffffffffff, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 799.397261] CPU: 0 PID: 32728 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 799.407233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 799.416600] Call Trace: [ 799.419204] dump_stack+0x1fc/0x2ef [ 799.422854] should_fail.cold+0xa/0xf [ 799.426676] ? lock_acquire+0x170/0x3c0 [ 799.430665] ? setup_fault_attr+0x200/0x200 [ 799.430946] audit: type=1804 audit(1670206234.220:768): pid=32710 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/634/bus" dev="sda1" ino=15732 res=1 [ 799.435005] __alloc_pages_nodemask+0x239/0x2890 [ 799.435028] ? __lock_acquire+0x6de/0x3ff0 [ 799.435054] ? __lock_acquire+0x6de/0x3ff0 [ 799.458621] audit: type=1804 audit(1670206234.420:769): pid=32728 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/385/bus" dev="sda1" ino=15346 res=1 [ 799.463125] ? gfp_pfmemalloc_allowed+0x150/0x150 02:10:34 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 799.463143] ? mark_held_locks+0xf0/0xf0 [ 799.463166] ? __lock_acquire+0x6de/0x3ff0 [ 799.463184] ? __do_page_cache_readahead+0x39f/0x6c0 [ 799.467583] audit: type=1804 audit(1670206234.440:770): pid=32729 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/635/bus" dev="sda1" ino=15715 res=1 [ 799.471631] alloc_pages_current+0x193/0x2a0 [ 799.471652] __page_cache_alloc+0x76/0x90 [ 799.471668] __do_page_cache_readahead+0x1a1/0x6c0 02:10:34 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x5000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 799.471691] ? read_pages.isra.0+0x5d0/0x5d0 [ 799.496515] audit: type=1804 audit(1670206234.460:771): pid=32729 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/635/bus" dev="sda1" ino=15715 res=1 [ 799.500290] ? page_cache_sync_readahead+0x1c5/0x520 [ 799.500314] ondemand_readahead.isra.0+0x575/0xd40 [ 799.500333] page_cache_sync_readahead+0x275/0x520 [ 799.500352] generic_file_read_iter+0x1497/0x2b60 02:10:34 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 799.500380] ext4_file_read_iter+0x17b/0x3a0 [ 799.504605] audit: type=1804 audit(1670206234.510:772): pid=32742 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/385/bus" dev="sda1" ino=15346 res=1 [ 799.508643] generic_file_splice_read+0x44a/0x6d0 [ 799.508661] ? add_to_pipe+0x360/0x360 [ 799.508687] ? security_file_permission+0x1c0/0x220 [ 799.508703] ? add_to_pipe+0x360/0x360 [ 799.508719] do_splice_to+0x10e/0x160 02:10:34 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 799.647701] splice_direct_to_actor+0x2b9/0x8d0 [ 799.652393] ? generic_pipe_buf_nosteal+0x10/0x10 [ 799.657271] ? do_splice_to+0x160/0x160 [ 799.661273] do_splice_direct+0x1a7/0x270 [ 799.665440] ? splice_direct_to_actor+0x8d0/0x8d0 [ 799.670306] ? security_file_permission+0x1c0/0x220 [ 799.675350] do_sendfile+0x550/0xc30 [ 799.679086] ? do_compat_pwritev64+0x1b0/0x1b0 [ 799.683681] ? vfs_write+0x393/0x540 [ 799.687407] __se_sys_sendfile64+0x147/0x160 [ 799.691889] ? __se_sys_sendfile+0x180/0x180 [ 799.696315] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 799.701693] ? trace_hardirqs_off_caller+0x6e/0x210 [ 799.706734] ? do_syscall_64+0x21/0x620 [ 799.710728] do_syscall_64+0xf9/0x620 [ 799.714551] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 799.719751] RIP: 0033:0x7f337636e0d9 [ 799.723480] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 02:10:34 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x12}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:34 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:34 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 5) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:34 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x700}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 799.727114] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 799.742382] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 799.742396] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 799.742402] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 799.742411] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 799.742418] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000001 [ 799.742427] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:34 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:35 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9a02000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:35 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:35 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 799.917238] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 799.933793] FAULT_INJECTION: forcing a failure. [ 799.933793] name fail_page_alloc, interval 1, probability 0, space 0, times 0 02:10:35 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1d}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:35 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 799.980169] CPU: 1 PID: 32767 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 799.988089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 799.997452] Call Trace: [ 800.000053] dump_stack+0x1fc/0x2ef [ 800.003701] should_fail.cold+0xa/0xf [ 800.007520] ? lock_acquire+0x170/0x3c0 [ 800.011615] ? setup_fault_attr+0x200/0x200 [ 800.015973] __alloc_pages_nodemask+0x239/0x2890 [ 800.020754] ? __lock_acquire+0x6de/0x3ff0 [ 800.025025] ? __lock_acquire+0x6de/0x3ff0 [ 800.029284] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 800.034144] ? mark_held_locks+0xf0/0xf0 [ 800.038232] ? __lock_acquire+0x6de/0x3ff0 [ 800.042495] ? __do_page_cache_readahead+0x39f/0x6c0 [ 800.047624] alloc_pages_current+0x193/0x2a0 [ 800.052059] __page_cache_alloc+0x76/0x90 [ 800.056225] __do_page_cache_readahead+0x1a1/0x6c0 [ 800.061179] ? read_pages.isra.0+0x5d0/0x5d0 [ 800.065601] ? page_cache_sync_readahead+0x1c5/0x520 [ 800.070801] ondemand_readahead.isra.0+0x575/0xd40 [ 800.075748] page_cache_sync_readahead+0x275/0x520 [ 800.080674] generic_file_read_iter+0x1497/0x2b60 [ 800.086040] ext4_file_read_iter+0x17b/0x3a0 [ 800.090441] generic_file_splice_read+0x44a/0x6d0 [ 800.095273] ? add_to_pipe+0x360/0x360 [ 800.099159] ? security_file_permission+0x1c0/0x220 [ 800.104173] ? add_to_pipe+0x360/0x360 [ 800.108053] do_splice_to+0x10e/0x160 [ 800.111847] splice_direct_to_actor+0x2b9/0x8d0 [ 800.116512] ? generic_pipe_buf_nosteal+0x10/0x10 [ 800.121484] ? do_splice_to+0x160/0x160 [ 800.125457] do_splice_direct+0x1a7/0x270 [ 800.129599] ? splice_direct_to_actor+0x8d0/0x8d0 [ 800.134438] ? security_file_permission+0x1c0/0x220 [ 800.139561] do_sendfile+0x550/0xc30 [ 800.143275] ? do_compat_pwritev64+0x1b0/0x1b0 [ 800.147853] ? vfs_write+0x393/0x540 [ 800.151565] __se_sys_sendfile64+0x147/0x160 [ 800.155967] ? __se_sys_sendfile+0x180/0x180 [ 800.160369] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 800.165732] ? trace_hardirqs_off_caller+0x6e/0x210 [ 800.170744] ? do_syscall_64+0x21/0x620 [ 800.174710] do_syscall_64+0xf9/0x620 [ 800.178508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 800.183689] RIP: 0033:0x7f337636e0d9 [ 800.187394] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 800.206285] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 800.213980] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 800.221240] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 800.228497] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 800.235753] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000001 [ 800.243105] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:35 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:35 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa00f000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:35 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 6) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:35 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:35 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:35 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 800.410775] FAULT_INJECTION: forcing a failure. [ 800.410775] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 800.436293] CPU: 0 PID: 342 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 800.444038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 800.453391] Call Trace: [ 800.455982] dump_stack+0x1fc/0x2ef [ 800.459606] should_fail.cold+0xa/0xf [ 800.463398] ? lock_acquire+0x170/0x3c0 [ 800.467370] ? setup_fault_attr+0x200/0x200 [ 800.471694] __alloc_pages_nodemask+0x239/0x2890 [ 800.476444] ? __lock_acquire+0x6de/0x3ff0 [ 800.480679] ? __lock_acquire+0x6de/0x3ff0 [ 800.484913] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 800.489747] ? mark_held_locks+0xf0/0xf0 [ 800.493805] ? __lock_acquire+0x6de/0x3ff0 [ 800.498032] ? __do_page_cache_readahead+0x39f/0x6c0 [ 800.503136] alloc_pages_current+0x193/0x2a0 [ 800.507539] __page_cache_alloc+0x76/0x90 [ 800.511682] __do_page_cache_readahead+0x1a1/0x6c0 [ 800.516612] ? read_pages.isra.0+0x5d0/0x5d0 [ 800.521012] ? page_cache_sync_readahead+0x1c5/0x520 [ 800.526112] ondemand_readahead.isra.0+0x575/0xd40 [ 800.531037] page_cache_sync_readahead+0x275/0x520 [ 800.535960] generic_file_read_iter+0x1497/0x2b60 [ 800.540804] ext4_file_read_iter+0x17b/0x3a0 [ 800.545215] generic_file_splice_read+0x44a/0x6d0 [ 800.550051] ? add_to_pipe+0x360/0x360 [ 800.553939] ? security_file_permission+0x1c0/0x220 [ 800.558948] ? add_to_pipe+0x360/0x360 [ 800.562830] do_splice_to+0x10e/0x160 [ 800.566627] splice_direct_to_actor+0x2b9/0x8d0 [ 800.571294] ? generic_pipe_buf_nosteal+0x10/0x10 [ 800.576130] ? do_splice_to+0x160/0x160 [ 800.580104] do_splice_direct+0x1a7/0x270 [ 800.584245] ? splice_direct_to_actor+0x8d0/0x8d0 [ 800.589084] ? security_file_permission+0x1c0/0x220 [ 800.594094] do_sendfile+0x550/0xc30 [ 800.597806] ? do_compat_pwritev64+0x1b0/0x1b0 [ 800.602382] ? vfs_write+0x393/0x540 [ 800.606092] __se_sys_sendfile64+0x147/0x160 [ 800.610494] ? __se_sys_sendfile+0x180/0x180 [ 800.614894] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 800.620246] ? trace_hardirqs_off_caller+0x6e/0x210 [ 800.625254] ? do_syscall_64+0x21/0x620 [ 800.629220] do_syscall_64+0xf9/0x620 [ 800.633021] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 800.638203] RIP: 0033:0x7f337636e0d9 [ 800.641906] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 02:10:35 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa030000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:35 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:35 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 7) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 800.660796] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 800.668491] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 800.675752] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 800.683009] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 800.690266] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000001 [ 800.697522] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:35 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(0x0, 0x0) 02:10:35 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 800.793722] FAULT_INJECTION: forcing a failure. [ 800.793722] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 800.822727] CPU: 1 PID: 359 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 800.830473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 800.839834] Call Trace: [ 800.842437] dump_stack+0x1fc/0x2ef [ 800.846087] should_fail.cold+0xa/0xf [ 800.849906] ? lock_acquire+0x170/0x3c0 [ 800.853892] ? setup_fault_attr+0x200/0x200 [ 800.858234] __alloc_pages_nodemask+0x239/0x2890 [ 800.863017] ? __lock_acquire+0x6de/0x3ff0 [ 800.867262] ? __lock_acquire+0x6de/0x3ff0 [ 800.871499] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 800.876336] ? mark_held_locks+0xf0/0xf0 [ 800.880396] ? __lock_acquire+0x6de/0x3ff0 [ 800.884623] ? __do_page_cache_readahead+0x39f/0x6c0 [ 800.889736] alloc_pages_current+0x193/0x2a0 [ 800.894140] __page_cache_alloc+0x76/0x90 [ 800.898280] __do_page_cache_readahead+0x1a1/0x6c0 [ 800.903222] ? read_pages.isra.0+0x5d0/0x5d0 [ 800.907623] ? page_cache_sync_readahead+0x1c5/0x520 [ 800.912720] ondemand_readahead.isra.0+0x575/0xd40 [ 800.917641] page_cache_sync_readahead+0x275/0x520 [ 800.922651] generic_file_read_iter+0x1497/0x2b60 [ 800.927495] ext4_file_read_iter+0x17b/0x3a0 [ 800.931918] generic_file_splice_read+0x44a/0x6d0 [ 800.936750] ? add_to_pipe+0x360/0x360 [ 800.940636] ? security_file_permission+0x1c0/0x220 [ 800.945643] ? add_to_pipe+0x360/0x360 [ 800.949522] do_splice_to+0x10e/0x160 [ 800.953316] splice_direct_to_actor+0x2b9/0x8d0 [ 800.957980] ? generic_pipe_buf_nosteal+0x10/0x10 [ 800.962812] ? do_splice_to+0x160/0x160 [ 800.966789] do_splice_direct+0x1a7/0x270 [ 800.971031] ? splice_direct_to_actor+0x8d0/0x8d0 [ 800.975877] ? security_file_permission+0x1c0/0x220 [ 800.980899] do_sendfile+0x550/0xc30 [ 800.984620] ? do_compat_pwritev64+0x1b0/0x1b0 [ 800.989395] ? vfs_write+0x393/0x540 [ 800.993108] __se_sys_sendfile64+0x147/0x160 [ 800.997516] ? __se_sys_sendfile+0x180/0x180 [ 801.001913] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 801.007264] ? trace_hardirqs_off_caller+0x6e/0x210 [ 801.012270] ? do_syscall_64+0x21/0x620 [ 801.016237] do_syscall_64+0xf9/0x620 [ 801.020119] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 801.025299] RIP: 0033:0x7f337636e0d9 02:10:36 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x14d}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:36 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb000200, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 801.028999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 801.047892] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 801.055588] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 801.062841] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 801.070099] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 801.077354] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000001 [ 801.084611] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:36 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xc00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:36 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 8) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:36 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x29a}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:36 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xc8693978b0000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:36 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 801.262769] FAULT_INJECTION: forcing a failure. [ 801.262769] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 801.294859] CPU: 0 PID: 383 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 801.302621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 801.311986] Call Trace: [ 801.314599] dump_stack+0x1fc/0x2ef [ 801.318246] should_fail.cold+0xa/0xf [ 801.322062] ? lock_acquire+0x170/0x3c0 [ 801.326055] ? setup_fault_attr+0x200/0x200 [ 801.330489] __alloc_pages_nodemask+0x239/0x2890 [ 801.335274] ? __lock_acquire+0x6de/0x3ff0 [ 801.339532] ? __lock_acquire+0x6de/0x3ff0 [ 801.343794] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 801.348658] ? mark_held_locks+0xf0/0xf0 [ 801.352741] ? __lock_acquire+0x6de/0x3ff0 [ 801.356983] ? __do_page_cache_readahead+0x39f/0x6c0 [ 801.362097] alloc_pages_current+0x193/0x2a0 [ 801.366494] __page_cache_alloc+0x76/0x90 [ 801.370635] __do_page_cache_readahead+0x1a1/0x6c0 [ 801.375559] ? read_pages.isra.0+0x5d0/0x5d0 [ 801.379965] ? page_cache_sync_readahead+0x1c5/0x520 [ 801.385060] ondemand_readahead.isra.0+0x575/0xd40 [ 801.389986] page_cache_sync_readahead+0x275/0x520 [ 801.394916] generic_file_read_iter+0x1497/0x2b60 [ 801.399757] ext4_file_read_iter+0x17b/0x3a0 [ 801.404161] generic_file_splice_read+0x44a/0x6d0 [ 801.409093] ? add_to_pipe+0x360/0x360 [ 801.412976] ? security_file_permission+0x1c0/0x220 [ 801.418084] ? add_to_pipe+0x360/0x360 [ 801.421957] do_splice_to+0x10e/0x160 [ 801.425793] splice_direct_to_actor+0x2b9/0x8d0 [ 801.430452] ? generic_pipe_buf_nosteal+0x10/0x10 [ 801.435295] ? do_splice_to+0x160/0x160 [ 801.439261] do_splice_direct+0x1a7/0x270 [ 801.443404] ? splice_direct_to_actor+0x8d0/0x8d0 [ 801.448236] ? security_file_permission+0x1c0/0x220 [ 801.453246] do_sendfile+0x550/0xc30 [ 801.457023] ? do_compat_pwritev64+0x1b0/0x1b0 [ 801.461644] ? vfs_write+0x393/0x540 [ 801.465354] __se_sys_sendfile64+0x147/0x160 [ 801.469751] ? __se_sys_sendfile+0x180/0x180 [ 801.474149] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 801.479505] ? trace_hardirqs_off_caller+0x6e/0x210 [ 801.484512] ? do_syscall_64+0x21/0x620 [ 801.488474] do_syscall_64+0xf9/0x620 [ 801.492282] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 801.497474] RIP: 0033:0x7f337636e0d9 02:10:36 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x300}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:36 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xe000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 801.501180] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 801.520072] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 801.527773] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 801.535030] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 801.542286] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 801.549546] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000001 [ 801.556802] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:36 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 9) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:36 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(0x0, 0x0) 02:10:36 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x30e}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:36 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xc03}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:36 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xf000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:36 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xf602000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:36 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:36 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfeffffff00000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 801.701610] FAULT_INJECTION: forcing a failure. [ 801.701610] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 801.752022] CPU: 1 PID: 412 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 801.759766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 801.769117] Call Trace: [ 801.771707] dump_stack+0x1fc/0x2ef [ 801.775327] should_fail.cold+0xa/0xf [ 801.779116] ? lock_acquire+0x170/0x3c0 [ 801.783081] ? setup_fault_attr+0x200/0x200 [ 801.787402] __alloc_pages_nodemask+0x239/0x2890 [ 801.792152] ? __lock_acquire+0x6de/0x3ff0 [ 801.796380] ? __lock_acquire+0x6de/0x3ff0 [ 801.800604] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 801.805459] ? mark_held_locks+0xf0/0xf0 [ 801.809525] ? __lock_acquire+0x6de/0x3ff0 [ 801.813760] ? __do_page_cache_readahead+0x39f/0x6c0 [ 801.818862] alloc_pages_current+0x193/0x2a0 [ 801.823264] __page_cache_alloc+0x76/0x90 [ 801.827401] __do_page_cache_readahead+0x1a1/0x6c0 [ 801.832324] ? read_pages.isra.0+0x5d0/0x5d0 [ 801.836728] ? page_cache_sync_readahead+0x1c5/0x520 [ 801.841860] ondemand_readahead.isra.0+0x575/0xd40 [ 801.846781] page_cache_sync_readahead+0x275/0x520 [ 801.851701] generic_file_read_iter+0x1497/0x2b60 [ 801.856632] ext4_file_read_iter+0x17b/0x3a0 [ 801.861056] generic_file_splice_read+0x44a/0x6d0 [ 801.865910] ? add_to_pipe+0x360/0x360 [ 801.869812] ? security_file_permission+0x1c0/0x220 [ 801.874827] ? add_to_pipe+0x360/0x360 [ 801.878705] do_splice_to+0x10e/0x160 [ 801.882502] splice_direct_to_actor+0x2b9/0x8d0 [ 801.887165] ? generic_pipe_buf_nosteal+0x10/0x10 [ 801.892004] ? do_splice_to+0x160/0x160 [ 801.895972] do_splice_direct+0x1a7/0x270 [ 801.900112] ? splice_direct_to_actor+0x8d0/0x8d0 [ 801.904944] ? security_file_permission+0x1c0/0x220 [ 801.909950] do_sendfile+0x550/0xc30 [ 801.913658] ? do_compat_pwritev64+0x1b0/0x1b0 [ 801.918227] ? vfs_write+0x393/0x540 [ 801.921950] __se_sys_sendfile64+0x147/0x160 [ 801.926365] ? __se_sys_sendfile+0x180/0x180 [ 801.930775] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 801.936137] ? trace_hardirqs_off_caller+0x6e/0x210 [ 801.941147] ? do_syscall_64+0x21/0x620 [ 801.945109] do_syscall_64+0xf9/0x620 [ 801.948900] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 801.954072] RIP: 0033:0x7f337636e0d9 [ 801.957859] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 801.976744] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 801.984532] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 801.991884] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 02:10:37 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 801.999155] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 802.006415] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000001 [ 802.013677] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:37 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x11000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:37 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x12000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:37 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xffffff7f00000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:37 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 10) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 802.233168] FAULT_INJECTION: forcing a failure. [ 802.233168] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 802.250988] CPU: 1 PID: 458 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 802.258731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 802.268095] Call Trace: [ 802.270695] dump_stack+0x1fc/0x2ef [ 802.274346] should_fail.cold+0xa/0xf [ 802.278156] ? lock_acquire+0x170/0x3c0 [ 802.282149] ? setup_fault_attr+0x200/0x200 [ 802.286476] __alloc_pages_nodemask+0x239/0x2890 [ 802.291237] ? __lock_acquire+0x6de/0x3ff0 [ 802.295472] ? __lock_acquire+0x6de/0x3ff0 [ 802.299692] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 802.304519] ? mark_held_locks+0xf0/0xf0 [ 802.308585] ? __lock_acquire+0x6de/0x3ff0 [ 802.312824] ? __do_page_cache_readahead+0x39f/0x6c0 [ 802.317926] alloc_pages_current+0x193/0x2a0 [ 802.322320] __page_cache_alloc+0x76/0x90 [ 802.326473] __do_page_cache_readahead+0x1a1/0x6c0 [ 802.331406] ? read_pages.isra.0+0x5d0/0x5d0 [ 802.335901] ? page_cache_sync_readahead+0x1c5/0x520 [ 802.341003] ondemand_readahead.isra.0+0x575/0xd40 [ 802.345924] page_cache_sync_readahead+0x275/0x520 [ 802.350852] generic_file_read_iter+0x1497/0x2b60 [ 802.355720] ext4_file_read_iter+0x17b/0x3a0 [ 802.360115] generic_file_splice_read+0x44a/0x6d0 [ 802.364943] ? add_to_pipe+0x360/0x360 [ 802.368838] ? security_file_permission+0x1c0/0x220 [ 802.373860] ? add_to_pipe+0x360/0x360 [ 802.377747] do_splice_to+0x10e/0x160 [ 802.381537] splice_direct_to_actor+0x2b9/0x8d0 [ 802.386190] ? generic_pipe_buf_nosteal+0x10/0x10 [ 802.391029] ? do_splice_to+0x160/0x160 [ 802.395012] do_splice_direct+0x1a7/0x270 [ 802.399154] ? splice_direct_to_actor+0x8d0/0x8d0 [ 802.403986] ? security_file_permission+0x1c0/0x220 [ 802.409090] do_sendfile+0x550/0xc30 [ 802.412816] ? do_compat_pwritev64+0x1b0/0x1b0 [ 802.417393] ? vfs_write+0x393/0x540 [ 802.421089] __se_sys_sendfile64+0x147/0x160 [ 802.425477] ? __se_sys_sendfile+0x180/0x180 [ 802.429877] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 802.435233] ? trace_hardirqs_off_caller+0x6e/0x210 [ 802.440231] ? do_syscall_64+0x21/0x620 [ 802.444190] do_syscall_64+0xf9/0x620 [ 802.448023] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 802.453210] RIP: 0033:0x7f337636e0d9 [ 802.456916] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 802.475814] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 802.484027] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 802.491283] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 802.498550] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 802.505810] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 802.513076] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:37 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(0x0, 0x0) 02:10:37 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x500}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:37 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfa0}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:37 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1d000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:37 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xffffffff00000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:37 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 11) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:37 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1f000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:37 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x600}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:37 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1100}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 802.660999] FAULT_INJECTION: forcing a failure. [ 802.660999] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 802.709717] CPU: 1 PID: 478 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 802.717455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 802.726810] Call Trace: [ 802.729410] dump_stack+0x1fc/0x2ef [ 802.733053] should_fail.cold+0xa/0xf [ 802.736867] ? lock_acquire+0x170/0x3c0 [ 802.740847] ? setup_fault_attr+0x200/0x200 [ 802.745189] __alloc_pages_nodemask+0x239/0x2890 [ 802.749957] ? __lock_acquire+0x6de/0x3ff0 [ 802.754204] ? __lock_acquire+0x6de/0x3ff0 02:10:37 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:37 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x20000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:37 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x40000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 802.758452] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 802.763305] ? mark_held_locks+0xf0/0xf0 [ 802.767381] ? __lock_acquire+0x6de/0x3ff0 [ 802.771629] ? __do_page_cache_readahead+0x39f/0x6c0 [ 802.776750] alloc_pages_current+0x193/0x2a0 [ 802.781180] __page_cache_alloc+0x76/0x90 [ 802.785340] __do_page_cache_readahead+0x1a1/0x6c0 [ 802.790296] ? read_pages.isra.0+0x5d0/0x5d0 [ 802.794712] ? page_cache_sync_readahead+0x1c5/0x520 [ 802.799840] ondemand_readahead.isra.0+0x575/0xd40 [ 802.804790] page_cache_sync_readahead+0x275/0x520 [ 802.809748] generic_file_read_iter+0x1497/0x2b60 [ 802.814619] ext4_file_read_iter+0x17b/0x3a0 [ 802.819043] generic_file_splice_read+0x44a/0x6d0 [ 802.823905] ? add_to_pipe+0x360/0x360 [ 802.827825] ? security_file_permission+0x1c0/0x220 [ 802.832859] ? add_to_pipe+0x360/0x360 [ 802.836757] do_splice_to+0x10e/0x160 [ 802.840572] splice_direct_to_actor+0x2b9/0x8d0 [ 802.845255] ? generic_pipe_buf_nosteal+0x10/0x10 [ 802.850117] ? do_splice_to+0x160/0x160 [ 802.854121] do_splice_direct+0x1a7/0x270 [ 802.858290] ? splice_direct_to_actor+0x8d0/0x8d0 [ 802.863150] ? security_file_permission+0x1c0/0x220 [ 802.868184] do_sendfile+0x550/0xc30 [ 802.871916] ? do_compat_pwritev64+0x1b0/0x1b0 [ 802.876519] ? vfs_write+0x393/0x540 [ 802.880247] __se_sys_sendfile64+0x147/0x160 [ 802.884663] ? __se_sys_sendfile+0x180/0x180 [ 802.889088] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 802.894466] ? trace_hardirqs_off_caller+0x6e/0x210 [ 802.899491] ? do_syscall_64+0x21/0x620 [ 802.903466] do_syscall_64+0xf9/0x620 [ 802.907263] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 802.912450] RIP: 0033:0x7f337636e0d9 [ 802.916148] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 802.935040] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 802.942745] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 802.950005] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 802.957265] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 802.964531] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 802.971786] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:38 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 12) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:38 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x401f0000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:38 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x700}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:38 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1300}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:38 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 1) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:38 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4d010000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:38 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 803.568354] net_ratelimit: 12 callbacks suppressed [ 803.568364] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 803.603429] FAULT_INJECTION: forcing a failure. [ 803.603429] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 803.628738] CPU: 0 PID: 524 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 803.636484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 803.639146] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 803.645864] Call Trace: [ 803.645889] dump_stack+0x1fc/0x2ef [ 803.645909] should_fail.cold+0xa/0xf [ 803.645927] ? lock_acquire+0x170/0x3c0 [ 803.670364] ? setup_fault_attr+0x200/0x200 [ 803.674697] __alloc_pages_nodemask+0x239/0x2890 [ 803.679455] ? __lock_acquire+0x6de/0x3ff0 [ 803.683687] ? __lock_acquire+0x6de/0x3ff0 [ 803.687914] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 803.692746] ? mark_held_locks+0xf0/0xf0 [ 803.696805] ? __lock_acquire+0x6de/0x3ff0 [ 803.701048] ? __do_page_cache_readahead+0x39f/0x6c0 [ 803.706149] alloc_pages_current+0x193/0x2a0 [ 803.710555] __page_cache_alloc+0x76/0x90 [ 803.714694] __do_page_cache_readahead+0x1a1/0x6c0 [ 803.719620] ? read_pages.isra.0+0x5d0/0x5d0 [ 803.724018] ? page_cache_sync_readahead+0x1c5/0x520 [ 803.729118] ondemand_readahead.isra.0+0x575/0xd40 [ 803.734040] page_cache_sync_readahead+0x275/0x520 [ 803.738962] generic_file_read_iter+0x1497/0x2b60 [ 803.743809] ext4_file_read_iter+0x17b/0x3a0 [ 803.748212] generic_file_splice_read+0x44a/0x6d0 [ 803.753050] ? add_to_pipe+0x360/0x360 [ 803.756941] ? security_file_permission+0x1c0/0x220 [ 803.761953] ? add_to_pipe+0x360/0x360 [ 803.765844] do_splice_to+0x10e/0x160 [ 803.769637] splice_direct_to_actor+0x2b9/0x8d0 [ 803.774299] ? generic_pipe_buf_nosteal+0x10/0x10 [ 803.779153] ? do_splice_to+0x160/0x160 [ 803.783125] do_splice_direct+0x1a7/0x270 [ 803.787266] ? splice_direct_to_actor+0x8d0/0x8d0 [ 803.792102] ? security_file_permission+0x1c0/0x220 [ 803.797116] do_sendfile+0x550/0xc30 [ 803.800832] ? do_compat_pwritev64+0x1b0/0x1b0 [ 803.805410] ? vfs_write+0x393/0x540 [ 803.809118] __se_sys_sendfile64+0x147/0x160 [ 803.813522] ? __se_sys_sendfile+0x180/0x180 [ 803.817920] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 803.823275] ? trace_hardirqs_off_caller+0x6e/0x210 [ 803.828281] ? do_syscall_64+0x21/0x620 [ 803.832243] do_syscall_64+0xf9/0x620 [ 803.836036] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 803.841212] RIP: 0033:0x7f337636e0d9 [ 803.844913] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 803.863804] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 803.871501] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 02:10:38 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1400}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 803.878759] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 803.886284] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 803.893539] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 803.900795] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 [ 803.920802] FAULT_INJECTION: forcing a failure. 02:10:39 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:39 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 803.920802] name failslab, interval 1, probability 0, space 0, times 0 [ 803.933837] kauditd_printk_skb: 27 callbacks suppressed [ 803.933851] audit: type=1804 audit(1670206239.050:800): pid=541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/393/bus" dev="sda1" ino=14324 res=1 [ 804.021789] CPU: 0 PID: 539 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 804.029534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 804.038902] Call Trace: [ 804.041505] dump_stack+0x1fc/0x2ef [ 804.045131] should_fail.cold+0xa/0xf [ 804.048930] ? setup_fault_attr+0x200/0x200 [ 804.053241] ? lock_acquire+0x170/0x3c0 [ 804.057220] __should_failslab+0x115/0x180 [ 804.061449] should_failslab+0x5/0x10 [ 804.065238] kmem_cache_alloc_trace+0x284/0x380 [ 804.069938] alloc_pipe_info+0xb8/0x470 [ 804.073912] splice_direct_to_actor+0x6dd/0x8d0 [ 804.078665] ? apparmor_getprocattr+0x11e0/0x11e0 [ 804.083495] ? check_preemption_disabled+0x41/0x280 [ 804.088502] ? generic_pipe_buf_nosteal+0x10/0x10 [ 804.093336] ? do_splice_to+0x160/0x160 [ 804.097321] ? security_file_permission+0x1c0/0x220 [ 804.102333] do_splice_direct+0x1a7/0x270 [ 804.106471] ? splice_direct_to_actor+0x8d0/0x8d0 [ 804.111306] ? security_file_permission+0x1c0/0x220 [ 804.116315] do_sendfile+0x550/0xc30 [ 804.120026] ? do_compat_pwritev64+0x1b0/0x1b0 [ 804.124611] ? vfs_write+0x393/0x540 [ 804.128320] __se_sys_sendfile64+0x147/0x160 [ 804.132719] ? __se_sys_sendfile+0x180/0x180 [ 804.137117] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 804.142473] ? trace_hardirqs_off_caller+0x6e/0x210 [ 804.147478] ? do_syscall_64+0x21/0x620 [ 804.151443] do_syscall_64+0xf9/0x620 [ 804.155237] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 804.160933] RIP: 0033:0x7f663ae640d9 [ 804.164634] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 804.183519] RSP: 002b:00007f66393b5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 804.191214] RAX: ffffffffffffffda RBX: 00007f663af84050 RCX: 00007f663ae640d9 [ 804.198469] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 804.205903] RBP: 00007f66393b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 804.213159] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000001 02:10:39 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7c150000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:39 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 804.220416] R13: 00007ffec7936f5f R14: 00007f66393b5300 R15: 0000000000022000 [ 804.269838] audit: type=1804 audit(1670206239.080:801): pid=542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/643/bus" dev="sda1" ino=14419 res=1 02:10:39 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 13) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:39 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:39 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:39 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9a020000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:39 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 2) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:39 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1500}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:39 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:39 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfeffffff, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 804.438285] audit: type=1804 audit(1670206239.560:802): pid=577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/394/bus" dev="sda1" ino=14531 res=1 [ 804.460441] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 804.475584] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 804.488736] FAULT_INJECTION: forcing a failure. [ 804.488736] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 804.517709] FAULT_INJECTION: forcing a failure. [ 804.517709] name failslab, interval 1, probability 0, space 0, times 0 [ 804.543463] CPU: 0 PID: 581 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 804.551212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 804.560574] Call Trace: [ 804.563181] dump_stack+0x1fc/0x2ef [ 804.566831] should_fail.cold+0xa/0xf [ 804.570651] ? setup_fault_attr+0x200/0x200 [ 804.575071] ? lock_acquire+0x170/0x3c0 [ 804.579063] __should_failslab+0x115/0x180 [ 804.583319] should_failslab+0x5/0x10 [ 804.587126] __kmalloc+0x2ab/0x3c0 [ 804.590677] ? alloc_pipe_info+0x193/0x470 [ 804.594927] alloc_pipe_info+0x193/0x470 [ 804.595486] audit: type=1804 audit(1670206239.560:803): pid=581 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/644/bus" dev="sda1" ino=13987 res=1 [ 804.598999] splice_direct_to_actor+0x6dd/0x8d0 [ 804.599019] ? apparmor_getprocattr+0x11e0/0x11e0 [ 804.599034] ? check_preemption_disabled+0x41/0x280 [ 804.599048] ? generic_pipe_buf_nosteal+0x10/0x10 [ 804.599066] ? do_splice_to+0x160/0x160 [ 804.599080] ? security_file_permission+0x1c0/0x220 [ 804.599100] do_splice_direct+0x1a7/0x270 [ 804.599118] ? splice_direct_to_actor+0x8d0/0x8d0 [ 804.599135] ? security_file_permission+0x1c0/0x220 [ 804.599154] do_sendfile+0x550/0xc30 [ 804.599175] ? do_compat_pwritev64+0x1b0/0x1b0 [ 804.673410] ? vfs_write+0x393/0x540 [ 804.677143] __se_sys_sendfile64+0x147/0x160 [ 804.681573] ? __se_sys_sendfile+0x180/0x180 [ 804.685993] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 804.691365] ? trace_hardirqs_off_caller+0x6e/0x210 [ 804.696392] ? do_syscall_64+0x21/0x620 [ 804.700377] do_syscall_64+0xf9/0x620 [ 804.704184] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 804.709376] RIP: 0033:0x7f663ae640d9 [ 804.713109] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 804.732018] RSP: 002b:00007f66393d6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 02:10:39 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xffffff7f, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:39 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xe00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:39 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xe03}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:39 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfffffffe, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 804.739736] RAX: ffffffffffffffda RBX: 00007f663af83f80 RCX: 00007f663ae640d9 [ 804.747015] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 804.754287] RBP: 00007f66393d61d0 R08: 0000000000000000 R09: 0000000000000000 [ 804.761693] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000001 [ 804.768973] R13: 00007ffec7936f5f R14: 00007f66393d6300 R15: 0000000000022000 [ 804.774464] audit: type=1804 audit(1670206239.660:804): pid=592 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/394/bus" dev="sda1" ino=14531 res=1 [ 804.781078] CPU: 0 PID: 577 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 804.807076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 804.816527] Call Trace: [ 804.819139] dump_stack+0x1fc/0x2ef [ 804.822802] should_fail.cold+0xa/0xf [ 804.826615] ? lock_acquire+0x170/0x3c0 [ 804.830601] ? setup_fault_attr+0x200/0x200 [ 804.834951] __alloc_pages_nodemask+0x239/0x2890 [ 804.839729] ? __lock_acquire+0x6de/0x3ff0 [ 804.843981] ? __lock_acquire+0x6de/0x3ff0 [ 804.848232] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 804.853087] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 804.857685] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 804.862463] ? __lock_acquire+0x6de/0x3ff0 [ 804.866722] ? __do_page_cache_readahead+0x39f/0x6c0 [ 804.871845] alloc_pages_current+0x193/0x2a0 [ 804.872478] audit: type=1804 audit(1670206239.990:805): pid=603 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/644/bus" dev="sda1" ino=13987 res=1 [ 804.876261] __page_cache_alloc+0x76/0x90 [ 804.876279] __do_page_cache_readahead+0x1a1/0x6c0 [ 804.876305] ? read_pages.isra.0+0x5d0/0x5d0 [ 804.912901] ? page_cache_sync_readahead+0x1c5/0x520 [ 804.918026] ondemand_readahead.isra.0+0x575/0xd40 [ 804.922970] page_cache_sync_readahead+0x275/0x520 [ 804.927916] generic_file_read_iter+0x1497/0x2b60 [ 804.932788] ext4_file_read_iter+0x17b/0x3a0 [ 804.937207] generic_file_splice_read+0x44a/0x6d0 [ 804.942064] ? add_to_pipe+0x360/0x360 [ 804.945974] ? security_file_permission+0x1c0/0x220 [ 804.951003] ? add_to_pipe+0x360/0x360 [ 804.954904] do_splice_to+0x10e/0x160 [ 804.958708] splice_direct_to_actor+0x2b9/0x8d0 [ 804.963366] ? generic_pipe_buf_nosteal+0x10/0x10 [ 804.968206] ? do_splice_to+0x160/0x160 [ 804.972194] do_splice_direct+0x1a7/0x270 [ 804.976354] ? splice_direct_to_actor+0x8d0/0x8d0 [ 804.981186] ? security_file_permission+0x1c0/0x220 [ 804.986188] do_sendfile+0x550/0xc30 [ 804.989907] ? do_compat_pwritev64+0x1b0/0x1b0 [ 804.994496] ? vfs_write+0x393/0x540 [ 804.998204] __se_sys_sendfile64+0x147/0x160 [ 805.002832] ? __se_sys_sendfile+0x180/0x180 [ 805.007247] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 805.012626] ? trace_hardirqs_off_caller+0x6e/0x210 [ 805.017654] ? do_syscall_64+0x21/0x620 [ 805.021626] do_syscall_64+0xf9/0x620 [ 805.025434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 805.030708] RIP: 0033:0x7f337636e0d9 [ 805.034423] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 805.053323] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 805.061071] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 805.068333] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 805.075603] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 805.082857] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 02:10:40 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 14) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:40 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x157c}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 805.090115] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:40 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xf00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:40 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb54797683d, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:40 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x5}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:40 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 3) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:40 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 805.186273] audit: type=1804 audit(1670206240.300:806): pid=619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/395/bus" dev="sda1" ino=14499 res=1 [ 805.213995] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:40 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1100}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:40 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1f40}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 805.241780] FAULT_INJECTION: forcing a failure. [ 805.241780] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 805.281791] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 805.293821] audit: type=1804 audit(1670206240.400:807): pid=629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/645/bus" dev="sda1" ino=14068 res=1 [ 805.337326] CPU: 0 PID: 619 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 805.345072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 805.352240] FAULT_INJECTION: forcing a failure. [ 805.352240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 805.354430] Call Trace: [ 805.354453] dump_stack+0x1fc/0x2ef [ 805.354474] should_fail.cold+0xa/0xf [ 805.354492] ? lock_acquire+0x170/0x3c0 [ 805.354519] ? setup_fault_attr+0x200/0x200 [ 805.384874] __alloc_pages_nodemask+0x239/0x2890 [ 805.389648] ? __lock_acquire+0x6de/0x3ff0 [ 805.393909] ? __lock_acquire+0x6de/0x3ff0 [ 805.398247] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 805.403529] ? io_schedule_timeout+0x140/0x140 [ 805.408119] ? retint_kernel+0x2d/0x2d [ 805.412020] ? __lock_acquire+0x6de/0x3ff0 [ 805.416256] ? __do_page_cache_readahead+0x39f/0x6c0 [ 805.421371] alloc_pages_current+0x193/0x2a0 [ 805.425786] __page_cache_alloc+0x76/0x90 [ 805.429939] __do_page_cache_readahead+0x1a1/0x6c0 [ 805.434884] ? read_pages.isra.0+0x5d0/0x5d0 [ 805.439290] ? page_cache_sync_readahead+0x1c5/0x520 [ 805.444396] ondemand_readahead.isra.0+0x575/0xd40 [ 805.449330] page_cache_sync_readahead+0x275/0x520 [ 805.454262] generic_file_read_iter+0x1497/0x2b60 [ 805.459123] ext4_file_read_iter+0x17b/0x3a0 [ 805.463533] generic_file_splice_read+0x44a/0x6d0 [ 805.468375] ? add_to_pipe+0x360/0x360 [ 805.472274] ? security_file_permission+0x1c0/0x220 [ 805.477297] ? add_to_pipe+0x360/0x360 [ 805.481191] do_splice_to+0x10e/0x160 [ 805.484999] splice_direct_to_actor+0x2b9/0x8d0 [ 805.489678] ? generic_pipe_buf_nosteal+0x10/0x10 [ 805.494527] ? do_splice_to+0x160/0x160 [ 805.498510] do_splice_direct+0x1a7/0x270 [ 805.502661] ? splice_direct_to_actor+0x8d0/0x8d0 [ 805.507509] ? security_file_permission+0x1c0/0x220 [ 805.512533] do_sendfile+0x550/0xc30 [ 805.516246] ? do_compat_pwritev64+0x1b0/0x1b0 [ 805.520828] ? vfs_write+0x393/0x540 [ 805.524543] __se_sys_sendfile64+0x147/0x160 [ 805.528945] ? __se_sys_sendfile+0x180/0x180 [ 805.533344] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 805.538697] ? trace_hardirqs_off_caller+0x6e/0x210 [ 805.543704] ? do_syscall_64+0x21/0x620 [ 805.547669] do_syscall_64+0xf9/0x620 [ 805.551462] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 805.556649] RIP: 0033:0x7f337636e0d9 [ 805.560354] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 805.579240] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 02:10:40 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 805.586933] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 805.594188] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 805.601442] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 805.608699] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 805.615956] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 [ 805.635476] CPU: 1 PID: 642 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 805.640399] audit: type=1804 audit(1670206240.440:808): pid=634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/395/bus" dev="sda1" ino=14499 res=1 [ 805.643211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 805.643216] Call Trace: [ 805.643236] dump_stack+0x1fc/0x2ef [ 805.643258] should_fail.cold+0xa/0xf [ 805.686014] ? lock_acquire+0x170/0x3c0 [ 805.690004] ? setup_fault_attr+0x200/0x200 [ 805.694351] __alloc_pages_nodemask+0x239/0x2890 [ 805.698730] audit: type=1804 audit(1670206240.520:809): pid=643 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/645/bus" dev="sda1" ino=14068 res=1 [ 805.699116] ? __lock_acquire+0x6de/0x3ff0 [ 805.726755] ? __lock_acquire+0x6de/0x3ff0 [ 805.730988] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 805.735820] ? mark_held_locks+0xf0/0xf0 [ 805.739874] ? __lock_acquire+0x6de/0x3ff0 [ 805.744099] ? __do_page_cache_readahead+0x39f/0x6c0 [ 805.749194] alloc_pages_current+0x193/0x2a0 [ 805.753596] __page_cache_alloc+0x76/0x90 [ 805.757739] __do_page_cache_readahead+0x1a1/0x6c0 [ 805.762662] ? read_pages.isra.0+0x5d0/0x5d0 [ 805.767055] ? page_cache_sync_readahead+0x1c5/0x520 [ 805.772174] ondemand_readahead.isra.0+0x575/0xd40 [ 805.777146] page_cache_sync_readahead+0x275/0x520 [ 805.782111] generic_file_read_iter+0x1497/0x2b60 [ 805.786963] ext4_file_read_iter+0x17b/0x3a0 [ 805.791375] generic_file_splice_read+0x44a/0x6d0 [ 805.796234] ? add_to_pipe+0x360/0x360 [ 805.800132] ? security_file_permission+0x1c0/0x220 [ 805.805155] ? add_to_pipe+0x360/0x360 [ 805.809036] do_splice_to+0x10e/0x160 [ 805.812832] splice_direct_to_actor+0x2b9/0x8d0 [ 805.817495] ? generic_pipe_buf_nosteal+0x10/0x10 [ 805.822331] ? do_splice_to+0x160/0x160 [ 805.826306] do_splice_direct+0x1a7/0x270 [ 805.830448] ? splice_direct_to_actor+0x8d0/0x8d0 [ 805.835302] ? security_file_permission+0x1c0/0x220 [ 805.840330] do_sendfile+0x550/0xc30 [ 805.844052] ? do_compat_pwritev64+0x1b0/0x1b0 [ 805.848641] ? vfs_write+0x393/0x540 [ 805.852350] __se_sys_sendfile64+0x147/0x160 [ 805.857182] ? __se_sys_sendfile+0x180/0x180 [ 805.861579] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 805.866934] ? trace_hardirqs_off_caller+0x6e/0x210 [ 805.871938] ? do_syscall_64+0x21/0x620 [ 805.875904] do_syscall_64+0xf9/0x620 [ 805.879696] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 805.884869] RIP: 0033:0x7f663ae640d9 [ 805.888570] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 805.907461] RSP: 002b:00007f66393b5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 805.915157] RAX: ffffffffffffffda RBX: 00007f663af84050 RCX: 00007f663ae640d9 [ 805.922412] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 805.929664] RBP: 00007f66393b51d0 R08: 0000000000000000 R09: 0000000000000000 02:10:41 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1200}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:41 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 15) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 805.936934] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000001 [ 805.944207] R13: 00007ffec7936f5f R14: 00007f66393b5300 R15: 0000000000022000 02:10:41 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x157c}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:41 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:41 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 4) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:41 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:41 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 806.020276] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 806.053307] FAULT_INJECTION: forcing a failure. [ 806.053307] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 806.105565] CPU: 0 PID: 653 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 806.113323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 806.122688] Call Trace: [ 806.125295] dump_stack+0x1fc/0x2ef [ 806.128946] should_fail.cold+0xa/0xf [ 806.132763] ? lock_acquire+0x170/0x3c0 [ 806.136753] ? setup_fault_attr+0x200/0x200 [ 806.141099] __alloc_pages_nodemask+0x239/0x2890 [ 806.145881] ? __lock_acquire+0x6de/0x3ff0 [ 806.150143] ? __lock_acquire+0x6de/0x3ff0 [ 806.154399] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 806.159260] ? mark_held_locks+0xf0/0xf0 [ 806.163348] ? __lock_acquire+0x6de/0x3ff0 [ 806.167604] ? __do_page_cache_readahead+0x39f/0x6c0 [ 806.172744] alloc_pages_current+0x193/0x2a0 [ 806.177173] __page_cache_alloc+0x76/0x90 [ 806.177426] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 806.181336] __do_page_cache_readahead+0x1a1/0x6c0 [ 806.181360] ? read_pages.isra.0+0x5d0/0x5d0 [ 806.181375] ? page_cache_sync_readahead+0x1c5/0x520 [ 806.206109] ondemand_readahead.isra.0+0x575/0xd40 [ 806.211043] page_cache_sync_readahead+0x275/0x520 [ 806.215965] generic_file_read_iter+0x1497/0x2b60 [ 806.220814] ext4_file_read_iter+0x17b/0x3a0 [ 806.225218] generic_file_splice_read+0x44a/0x6d0 [ 806.230051] ? add_to_pipe+0x360/0x360 [ 806.233943] ? security_file_permission+0x1c0/0x220 [ 806.238952] ? add_to_pipe+0x360/0x360 [ 806.242836] do_splice_to+0x10e/0x160 [ 806.246634] splice_direct_to_actor+0x2b9/0x8d0 [ 806.251309] ? generic_pipe_buf_nosteal+0x10/0x10 [ 806.256146] ? do_splice_to+0x160/0x160 [ 806.260127] do_splice_direct+0x1a7/0x270 [ 806.264272] ? splice_direct_to_actor+0x8d0/0x8d0 [ 806.269111] ? security_file_permission+0x1c0/0x220 [ 806.274127] do_sendfile+0x550/0xc30 [ 806.277958] ? do_compat_pwritev64+0x1b0/0x1b0 [ 806.282533] ? vfs_write+0x393/0x540 [ 806.286242] __se_sys_sendfile64+0x147/0x160 [ 806.290641] ? __se_sys_sendfile+0x180/0x180 [ 806.295042] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 806.300400] ? trace_hardirqs_off_caller+0x6e/0x210 [ 806.305409] ? do_syscall_64+0x21/0x620 [ 806.309380] do_syscall_64+0xf9/0x620 [ 806.313176] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 806.318354] RIP: 0033:0x7f337636e0d9 [ 806.322055] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 806.340944] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 806.348652] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 02:10:41 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x40000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:41 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1d00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 806.355999] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 806.363257] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 806.370516] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 806.377772] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:41 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:41 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x80000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:41 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1f00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:41 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x401f}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:41 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 16) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:41 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x803e0000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:41 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:41 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1f40}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 806.640227] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 806.678224] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 806.707778] FAULT_INJECTION: forcing a failure. [ 806.707778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 806.732500] CPU: 0 PID: 707 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 806.740251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 806.749613] Call Trace: [ 806.752213] dump_stack+0x1fc/0x2ef [ 806.755854] should_fail.cold+0xa/0xf [ 806.759669] ? lock_acquire+0x170/0x3c0 [ 806.763659] ? setup_fault_attr+0x200/0x200 [ 806.768007] __alloc_pages_nodemask+0x239/0x2890 [ 806.772782] ? __lock_acquire+0x6de/0x3ff0 [ 806.777035] ? __lock_acquire+0x6de/0x3ff0 [ 806.781291] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 806.786146] ? mark_held_locks+0xf0/0xf0 [ 806.790229] ? __lock_acquire+0x6de/0x3ff0 [ 806.794482] ? __do_page_cache_readahead+0x39f/0x6c0 [ 806.799612] alloc_pages_current+0x193/0x2a0 [ 806.804023] __page_cache_alloc+0x76/0x90 [ 806.808178] __do_page_cache_readahead+0x1a1/0x6c0 [ 806.813117] ? read_pages.isra.0+0x5d0/0x5d0 [ 806.817526] ? page_cache_sync_readahead+0x1c5/0x520 [ 806.822638] ondemand_readahead.isra.0+0x575/0xd40 [ 806.827585] page_cache_sync_readahead+0x275/0x520 [ 806.832510] generic_file_read_iter+0x1497/0x2b60 [ 806.837366] ext4_file_read_iter+0x17b/0x3a0 [ 806.841774] generic_file_splice_read+0x44a/0x6d0 [ 806.846606] ? add_to_pipe+0x360/0x360 [ 806.850509] ? security_file_permission+0x1c0/0x220 [ 806.855531] ? add_to_pipe+0x360/0x360 [ 806.859448] do_splice_to+0x10e/0x160 [ 806.863253] splice_direct_to_actor+0x2b9/0x8d0 [ 806.867930] ? generic_pipe_buf_nosteal+0x10/0x10 [ 806.872772] ? do_splice_to+0x160/0x160 [ 806.876740] do_splice_direct+0x1a7/0x270 [ 806.880879] ? splice_direct_to_actor+0x8d0/0x8d0 [ 806.885715] ? security_file_permission+0x1c0/0x220 [ 806.890740] do_sendfile+0x550/0xc30 [ 806.894466] ? do_compat_pwritev64+0x1b0/0x1b0 [ 806.899046] ? vfs_write+0x393/0x540 [ 806.902757] __se_sys_sendfile64+0x147/0x160 [ 806.907166] ? __se_sys_sendfile+0x180/0x180 [ 806.911581] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 806.916952] ? trace_hardirqs_off_caller+0x6e/0x210 [ 806.921978] ? do_syscall_64+0x21/0x620 [ 806.925951] do_syscall_64+0xf9/0x620 [ 806.929762] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 806.934954] RIP: 0033:0x7f337636e0d9 [ 806.938685] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 806.957591] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 806.965300] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 806.972560] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 806.979836] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 806.987246] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 806.994515] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:42 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:42 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd0070000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:42 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4d01}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:42 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:42 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020060) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:42 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 17) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:42 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:42 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:42 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6400}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 807.160293] FAULT_INJECTION: forcing a failure. [ 807.160293] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 807.189710] CPU: 0 PID: 741 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 807.197456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 807.206816] Call Trace: [ 807.209420] dump_stack+0x1fc/0x2ef [ 807.213064] should_fail.cold+0xa/0xf [ 807.216878] ? lock_acquire+0x170/0x3c0 [ 807.220865] ? setup_fault_attr+0x200/0x200 [ 807.225212] __alloc_pages_nodemask+0x239/0x2890 [ 807.229994] ? __lock_acquire+0x6de/0x3ff0 [ 807.234254] ? __lock_acquire+0x6de/0x3ff0 [ 807.238505] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 807.243360] ? mark_held_locks+0xf0/0xf0 [ 807.247444] ? __lock_acquire+0x6de/0x3ff0 [ 807.251691] ? __do_page_cache_readahead+0x39f/0x6c0 02:10:42 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x401f}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 807.257165] alloc_pages_current+0x193/0x2a0 [ 807.261599] __page_cache_alloc+0x76/0x90 [ 807.265758] __do_page_cache_readahead+0x1a1/0x6c0 [ 807.270708] ? read_pages.isra.0+0x5d0/0x5d0 [ 807.275125] ? page_cache_sync_readahead+0x1c5/0x520 [ 807.280251] ondemand_readahead.isra.0+0x575/0xd40 [ 807.285203] page_cache_sync_readahead+0x275/0x520 [ 807.290159] generic_file_read_iter+0x1497/0x2b60 [ 807.295029] ext4_file_read_iter+0x17b/0x3a0 [ 807.299452] generic_file_splice_read+0x44a/0x6d0 [ 807.304402] ? add_to_pipe+0x360/0x360 02:10:42 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x200000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 807.308310] ? security_file_permission+0x1c0/0x220 [ 807.313343] ? add_to_pipe+0x360/0x360 [ 807.317243] do_splice_to+0x10e/0x160 [ 807.321054] splice_direct_to_actor+0x2b9/0x8d0 [ 807.325746] ? generic_pipe_buf_nosteal+0x10/0x10 [ 807.330612] ? do_splice_to+0x160/0x160 [ 807.334614] do_splice_direct+0x1a7/0x270 [ 807.338773] ? splice_direct_to_actor+0x8d0/0x8d0 [ 807.343635] ? security_file_permission+0x1c0/0x220 [ 807.348674] do_sendfile+0x550/0xc30 [ 807.352401] ? do_compat_pwritev64+0x1b0/0x1b0 [ 807.357000] ? vfs_write+0x393/0x540 02:10:42 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4d01}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 807.360722] __se_sys_sendfile64+0x147/0x160 [ 807.365138] ? __se_sys_sendfile+0x180/0x180 [ 807.369558] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 807.374941] ? trace_hardirqs_off_caller+0x6e/0x210 [ 807.379971] ? do_syscall_64+0x21/0x620 [ 807.383956] do_syscall_64+0xf9/0x620 [ 807.387769] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 807.392964] RIP: 0033:0x7f337636e0d9 [ 807.396686] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 807.415600] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 807.423322] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 807.430611] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 807.437893] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 807.445173] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 807.452452] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:42 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:42 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6400}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:42 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x300000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:42 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100022007) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:42 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 18) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:42 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7c15}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:42 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x400000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:42 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7c15}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 807.619947] FAULT_INJECTION: forcing a failure. [ 807.619947] name fail_page_alloc, interval 1, probability 0, space 0, times 0 02:10:42 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r0, 0x0, 0x800100020048) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 807.698350] CPU: 1 PID: 781 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 807.706100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 807.715461] Call Trace: [ 807.718068] dump_stack+0x1fc/0x2ef [ 807.721714] should_fail.cold+0xa/0xf [ 807.725526] ? lock_acquire+0x170/0x3c0 [ 807.729511] ? setup_fault_attr+0x200/0x200 [ 807.733868] __alloc_pages_nodemask+0x239/0x2890 [ 807.738636] ? __lock_acquire+0x6de/0x3ff0 [ 807.742891] ? __lock_acquire+0x6de/0x3ff0 [ 807.747141] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 807.751994] ? mark_held_locks+0xf0/0xf0 [ 807.756126] ? __lock_acquire+0x6de/0x3ff0 [ 807.761018] ? __do_page_cache_readahead+0x39f/0x6c0 [ 807.766160] alloc_pages_current+0x193/0x2a0 [ 807.770588] __page_cache_alloc+0x76/0x90 [ 807.774754] __do_page_cache_readahead+0x1a1/0x6c0 [ 807.779707] ? read_pages.isra.0+0x5d0/0x5d0 [ 807.784226] ? page_cache_sync_readahead+0x1c5/0x520 [ 807.789354] ondemand_readahead.isra.0+0x575/0xd40 [ 807.794295] page_cache_sync_readahead+0x275/0x520 [ 807.799228] generic_file_read_iter+0x1497/0x2b60 [ 807.804083] ext4_file_read_iter+0x17b/0x3a0 [ 807.808498] generic_file_splice_read+0x44a/0x6d0 [ 807.813340] ? add_to_pipe+0x360/0x360 [ 807.817228] ? security_file_permission+0x1c0/0x220 [ 807.822234] ? add_to_pipe+0x360/0x360 [ 807.826129] do_splice_to+0x10e/0x160 [ 807.829942] splice_direct_to_actor+0x2b9/0x8d0 [ 807.834616] ? generic_pipe_buf_nosteal+0x10/0x10 [ 807.839456] ? do_splice_to+0x160/0x160 [ 807.843438] do_splice_direct+0x1a7/0x270 [ 807.847577] ? splice_direct_to_actor+0x8d0/0x8d0 [ 807.852424] ? security_file_permission+0x1c0/0x220 [ 807.857437] do_sendfile+0x550/0xc30 [ 807.861147] ? do_compat_pwritev64+0x1b0/0x1b0 [ 807.865719] ? vfs_write+0x393/0x540 [ 807.869448] __se_sys_sendfile64+0x147/0x160 [ 807.873847] ? __se_sys_sendfile+0x180/0x180 [ 807.878245] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 807.883597] ? trace_hardirqs_off_caller+0x6e/0x210 [ 807.888600] ? do_syscall_64+0x21/0x620 [ 807.892564] do_syscall_64+0xf9/0x620 [ 807.896356] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 807.901531] RIP: 0033:0x7f337636e0d9 [ 807.905245] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 807.924217] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 807.932004] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 807.939268] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 02:10:43 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9a02}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:43 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x500000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 807.946526] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 807.953779] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 807.961041] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:43 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9a02}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:43 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:43 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r0, 0x0, 0x800100020048) creat(&(0x7f0000000340)='./bus\x00', 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) (async) ftruncate(r0, 0x2007ffb) (async) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) listen(r1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) (async) sendfile(r2, r0, 0x0, 0x800100020048) (async) creat(&(0x7f0000000340)='./bus\x00', 0x0) (async) 02:10:43 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x600000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:43 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000b}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:43 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 19) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:43 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa00f}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:43 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x700000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:43 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7d000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:43 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000b}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 808.592333] net_ratelimit: 6 callbacks suppressed [ 808.592343] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:43 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 808.635153] FAULT_INJECTION: forcing a failure. [ 808.635153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 02:10:43 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x800000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:43 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r0, 0x0, 0x800100020048) creat(&(0x7f0000000340)='./bus\x00', 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) (async) ftruncate(r0, 0x2007ffb) (async) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) listen(r1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) (async) sendfile(r2, r0, 0x0, 0x800100020048) (async) creat(&(0x7f0000000340)='./bus\x00', 0x0) (async) [ 808.723148] CPU: 1 PID: 842 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 808.730896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 808.740258] Call Trace: [ 808.742869] dump_stack+0x1fc/0x2ef [ 808.746517] should_fail.cold+0xa/0xf [ 808.750333] ? lock_acquire+0x170/0x3c0 [ 808.754324] ? setup_fault_attr+0x200/0x200 [ 808.758668] __alloc_pages_nodemask+0x239/0x2890 [ 808.763439] ? __lock_acquire+0x6de/0x3ff0 [ 808.767694] ? __lock_acquire+0x6de/0x3ff0 [ 808.771945] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 808.776802] ? mark_held_locks+0xf0/0xf0 [ 808.780891] ? __lock_acquire+0x6de/0x3ff0 [ 808.785148] ? __do_page_cache_readahead+0x39f/0x6c0 [ 808.790266] alloc_pages_current+0x193/0x2a0 [ 808.794688] __page_cache_alloc+0x76/0x90 [ 808.798865] __do_page_cache_readahead+0x1a1/0x6c0 [ 808.803817] ? read_pages.isra.0+0x5d0/0x5d0 [ 808.808237] ? page_cache_sync_readahead+0x1c5/0x520 [ 808.813358] ondemand_readahead.isra.0+0x575/0xd40 [ 808.818303] page_cache_sync_readahead+0x275/0x520 [ 808.823246] generic_file_read_iter+0x1497/0x2b60 [ 808.828152] ext4_file_read_iter+0x17b/0x3a0 [ 808.832581] generic_file_splice_read+0x44a/0x6d0 [ 808.837442] ? add_to_pipe+0x360/0x360 [ 808.839859] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 808.841344] ? security_file_permission+0x1c0/0x220 [ 808.841365] ? add_to_pipe+0x360/0x360 [ 808.841381] do_splice_to+0x10e/0x160 [ 808.841398] splice_direct_to_actor+0x2b9/0x8d0 [ 808.869096] ? generic_pipe_buf_nosteal+0x10/0x10 [ 808.873932] ? do_splice_to+0x160/0x160 [ 808.877904] do_splice_direct+0x1a7/0x270 [ 808.882046] ? splice_direct_to_actor+0x8d0/0x8d0 [ 808.886881] ? security_file_permission+0x1c0/0x220 [ 808.891890] do_sendfile+0x550/0xc30 [ 808.895598] ? do_compat_pwritev64+0x1b0/0x1b0 [ 808.900168] ? vfs_write+0x393/0x540 [ 808.903881] __se_sys_sendfile64+0x147/0x160 [ 808.908278] ? __se_sys_sendfile+0x180/0x180 [ 808.912676] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 808.918031] ? trace_hardirqs_off_caller+0x6e/0x210 [ 808.923034] ? do_syscall_64+0x21/0x620 [ 808.926997] do_syscall_64+0xf9/0x620 [ 808.930799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 808.935975] RIP: 0033:0x7f337636e0d9 [ 808.939678] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 808.958562] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 808.966258] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 808.973538] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 808.980803] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 808.988069] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 808.995327] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 [ 809.003334] kauditd_printk_skb: 20 callbacks suppressed [ 809.003347] audit: type=1804 audit(1670206243.950:830): pid=877 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/652/bus" dev="sda1" ino=14963 res=1 [ 809.103188] audit: type=1804 audit(1670206244.220:831): pid=882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/652/bus" dev="sda1" ino=14963 res=1 [ 809.136017] audit: type=1804 audit(1670206244.250:832): pid=882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2892191276/syzkaller.fan2S8/652/bus" dev="sda1" ino=14963 res=1 02:10:44 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:44 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3e8000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:44 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:44 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 20) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:44 executing program 5: ftruncate(0xffffffffffffffff, 0x2007ffb) r0 = open(&(0x7f0000000300)='./bus\x00', 0x80602, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0xfffffffffffffffd, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x40) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00') getgid() r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) dup(r3) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="8a4a57ae84f957b1ffeb650cc43dfc11775ecf1c3edd874261b37fe2be06d40e498b866f036c51d597a07be9463618c9c028c9aa8103ecd253fd479a533becd28b462c7fc95fc1348caef36948765ea8f299948498ae3ed2038ef77c553d84404d92dfa1d2790c"], 0x8c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000240)={'wg2\x00', {0x2, 0x0, @loopback}}) fgetxattr(r7, &(0x7f0000000180)=@known='trusted.overlay.origin\x00', 0x0, 0x0) splice(r7, 0x0, r4, &(0x7f0000000140)=0x1, 0x81, 0x8) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x1a0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "e66aaade28c86d5d", "4897522584c43813076f6d89ec23b80a", "496d6a8b", "008000071000"}, 0x28) sendfile(r2, r0, 0x0, 0x800100020046) 02:10:44 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa00000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 809.362393] audit: type=1804 audit(1670206244.480:833): pid=914 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/401/bus" dev="sda1" ino=14023 res=1 [ 809.364414] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:44 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x400000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 809.411511] FAULT_INJECTION: forcing a failure. [ 809.411511] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 809.451205] CPU: 1 PID: 914 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 809.459048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 809.468416] Call Trace: [ 809.471017] dump_stack+0x1fc/0x2ef [ 809.474669] should_fail.cold+0xa/0xf [ 809.478569] ? lock_acquire+0x170/0x3c0 [ 809.482549] ? setup_fault_attr+0x200/0x200 [ 809.486882] __alloc_pages_nodemask+0x239/0x2890 [ 809.491653] ? __lock_acquire+0x6de/0x3ff0 [ 809.495906] ? __lock_acquire+0x6de/0x3ff0 [ 809.500159] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 809.505017] ? mark_held_locks+0xf0/0xf0 [ 809.509265] ? __lock_acquire+0x6de/0x3ff0 [ 809.513521] ? __do_page_cache_readahead+0x39f/0x6c0 [ 809.518637] alloc_pages_current+0x193/0x2a0 [ 809.523056] __page_cache_alloc+0x76/0x90 [ 809.527214] __do_page_cache_readahead+0x1a1/0x6c0 [ 809.532157] ? read_pages.isra.0+0x5d0/0x5d0 [ 809.536567] ? page_cache_sync_readahead+0x1c5/0x520 [ 809.541694] ondemand_readahead.isra.0+0x575/0xd40 [ 809.546653] page_cache_sync_readahead+0x275/0x520 [ 809.551611] generic_file_read_iter+0x1497/0x2b60 [ 809.556478] ext4_file_read_iter+0x17b/0x3a0 [ 809.560900] generic_file_splice_read+0x44a/0x6d0 [ 809.565756] ? add_to_pipe+0x360/0x360 [ 809.569665] ? security_file_permission+0x1c0/0x220 [ 809.574782] ? add_to_pipe+0x360/0x360 [ 809.578684] do_splice_to+0x10e/0x160 [ 809.582496] splice_direct_to_actor+0x2b9/0x8d0 [ 809.587175] ? generic_pipe_buf_nosteal+0x10/0x10 [ 809.592027] ? do_splice_to+0x160/0x160 [ 809.596014] do_splice_direct+0x1a7/0x270 [ 809.600170] ? splice_direct_to_actor+0x8d0/0x8d0 [ 809.605035] ? security_file_permission+0x1c0/0x220 [ 809.610081] do_sendfile+0x550/0xc30 [ 809.613826] ? do_compat_pwritev64+0x1b0/0x1b0 [ 809.618422] ? vfs_write+0x393/0x540 [ 809.622146] __se_sys_sendfile64+0x147/0x160 [ 809.626562] ? __se_sys_sendfile+0x180/0x180 [ 809.630979] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 809.636356] ? trace_hardirqs_off_caller+0x6e/0x210 [ 809.641380] ? do_syscall_64+0x21/0x620 [ 809.645367] do_syscall_64+0xf9/0x620 [ 809.649179] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 809.654370] RIP: 0033:0x7f337636e0d9 [ 809.658085] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 809.676994] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 809.684717] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 809.691991] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 809.699267] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 809.706539] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 02:10:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:44 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa03000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 809.713812] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 [ 809.730173] audit: type=1804 audit(1670206244.850:834): pid=931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/401/bus" dev="sda1" ino=14023 res=1 02:10:44 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x800000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:44 executing program 5: ftruncate(0xffffffffffffffff, 0x2007ffb) (async) r0 = open(&(0x7f0000000300)='./bus\x00', 0x80602, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0xfffffffffffffffd, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x40) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00') getgid() (async) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) (async) dup(r3) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="8a4a57ae84f957b1ffeb650cc43dfc11775ecf1c3edd874261b37fe2be06d40e498b866f036c51d597a07be9463618c9c028c9aa8103ecd253fd479a533becd28b462c7fc95fc1348caef36948765ea8f299948498ae3ed2038ef77c553d84404d92dfa1d2790c"], 0x8c) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000240)={'wg2\x00', {0x2, 0x0, @loopback}}) fgetxattr(r7, &(0x7f0000000180)=@known='trusted.overlay.origin\x00', 0x0, 0x0) (async) splice(r7, 0x0, r4, &(0x7f0000000140)=0x1, 0x81, 0x8) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x1a0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "e66aaade28c86d5d", "4897522584c43813076f6d89ec23b80a", "496d6a8b", "008000071000"}, 0x28) (async) sendfile(r2, r0, 0x0, 0x800100020046) [ 809.909192] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.914846] ieee802154 phy1 wpan1: encryption failed: -22 02:10:45 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xb}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:45 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 21) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:45 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x803e00}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:45 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb00000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:45 executing program 5: ftruncate(0xffffffffffffffff, 0x2007ffb) r0 = open(&(0x7f0000000300)='./bus\x00', 0x80602, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = perf_event_open(&(0x7f0000000040)={0xfffffffffffffffd, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0x40) (async, rerun: 64) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00') (async, rerun: 32) getgid() (async) r5 = socket$inet6(0xa, 0x1, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x15) (async) dup(r3) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="8a4a57ae84f957b1ffeb650cc43dfc11775ecf1c3edd874261b37fe2be06d40e498b866f036c51d597a07be9463618c9c028c9aa8103ecd253fd479a533becd28b462c7fc95fc1348caef36948765ea8f299948498ae3ed2038ef77c553d84404d92dfa1d2790c"], 0x8c) (async, rerun: 64) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000240)={'wg2\x00', {0x2, 0x0, @loopback}}) (async) fgetxattr(r7, &(0x7f0000000180)=@known='trusted.overlay.origin\x00', 0x0, 0x0) (async) splice(r7, 0x0, r4, &(0x7f0000000140)=0x1, 0x81, 0x8) (async, rerun: 32) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async, rerun: 32) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x1a0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) (rerun: 64) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) (async, rerun: 32) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async, rerun: 32) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "e66aaade28c86d5d", "4897522584c43813076f6d89ec23b80a", "496d6a8b", "008000071000"}, 0x28) sendfile(r2, r0, 0x0, 0x800100020046) 02:10:45 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd00700}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 810.214127] audit: type=1804 audit(1670206245.331:835): pid=958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/402/bus" dev="sda1" ino=14979 res=1 [ 810.250671] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:45 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb00020000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 810.284372] FAULT_INJECTION: forcing a failure. [ 810.284372] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 810.322562] CPU: 1 PID: 958 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 810.330310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 810.339762] Call Trace: [ 810.342370] dump_stack+0x1fc/0x2ef [ 810.346012] should_fail.cold+0xa/0xf [ 810.349823] ? lock_acquire+0x170/0x3c0 [ 810.353903] ? setup_fault_attr+0x200/0x200 [ 810.358245] __alloc_pages_nodemask+0x239/0x2890 [ 810.363014] ? __lock_acquire+0x6de/0x3ff0 [ 810.367273] ? __lock_acquire+0x6de/0x3ff0 [ 810.371519] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 810.376387] ? mark_held_locks+0xf0/0xf0 [ 810.380468] ? __lock_acquire+0x6de/0x3ff0 [ 810.384725] ? __do_page_cache_readahead+0x39f/0x6c0 [ 810.389847] alloc_pages_current+0x193/0x2a0 [ 810.394267] __page_cache_alloc+0x76/0x90 [ 810.398429] __do_page_cache_readahead+0x1a1/0x6c0 [ 810.403375] ? read_pages.isra.0+0x5d0/0x5d0 [ 810.407790] ? page_cache_sync_readahead+0x1c5/0x520 [ 810.412905] ondemand_readahead.isra.0+0x575/0xd40 [ 810.417848] page_cache_sync_readahead+0x275/0x520 [ 810.422790] generic_file_read_iter+0x1497/0x2b60 [ 810.427656] ext4_file_read_iter+0x17b/0x3a0 02:10:45 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:45 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 810.432076] generic_file_splice_read+0x44a/0x6d0 [ 810.436930] ? add_to_pipe+0x360/0x360 [ 810.440834] ? security_file_permission+0x1c0/0x220 [ 810.445865] ? add_to_pipe+0x360/0x360 [ 810.449767] do_splice_to+0x10e/0x160 [ 810.453583] splice_direct_to_actor+0x2b9/0x8d0 [ 810.458273] ? generic_pipe_buf_nosteal+0x10/0x10 [ 810.463135] ? do_splice_to+0x160/0x160 [ 810.467136] do_splice_direct+0x1a7/0x270 [ 810.471297] ? splice_direct_to_actor+0x8d0/0x8d0 [ 810.476171] ? security_file_permission+0x1c0/0x220 [ 810.481207] do_sendfile+0x550/0xc30 [ 810.484941] ? do_compat_pwritev64+0x1b0/0x1b0 [ 810.489541] ? vfs_write+0x393/0x540 [ 810.493267] __se_sys_sendfile64+0x147/0x160 [ 810.497684] ? __se_sys_sendfile+0x180/0x180 [ 810.502108] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 810.507575] ? trace_hardirqs_off_caller+0x6e/0x210 [ 810.512601] ? do_syscall_64+0x21/0x620 [ 810.516584] do_syscall_64+0xf9/0x620 [ 810.520399] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 810.525592] RIP: 0033:0x7f337636e0d9 02:10:45 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 810.529314] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 810.549435] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 810.557154] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 810.564437] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 810.571803] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 02:10:45 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd00000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 810.579087] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 810.586370] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 [ 810.632872] audit: type=1804 audit(1670206245.751:836): pid=982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/402/bus" dev="sda1" ino=14979 res=1 02:10:46 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xc}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:46 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xe00000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:46 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:46 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:46 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 22) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:46 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000480)={0x800, [0x400, 0x100, 0x890, 0xa0, 0xfffa, 0x7ff, 0x1, 0xfff9, 0x4, 0x1, 0x9, 0x101, 0x7, 0x7, 0x3, 0xed, 0x20, 0x83a, 0x89b, 0x1, 0x8dd1, 0x1, 0x1f, 0x7fff, 0xfff8, 0xec, 0x5, 0x1, 0x4, 0x200, 0xc1, 0x2, 0x6, 0x7ff, 0x80, 0x7, 0x2c9, 0x5, 0x27d1, 0x6, 0x0, 0x101, 0x20, 0x81, 0xaea, 0x100, 0x5, 0x2], 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = signalfd4(r0, &(0x7f0000000000)={[0xc4e]}, 0x8, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000005840), 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) sendmmsg$unix(r0, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="8e11657c3c92feba829d0e51c24383a2bfd271a963de32098975bb01425ee164cb08972754ac2ab9e8abd61797d4a310e16c83a9c8e5583cdd1bdda95ee82f6106d3e2da248253f64e5a841cd58e5b14b8d65c7f9af51085b586b283103ca652d920ac35e19cc3bd0c15ed5ec6ffd622d25ac7c201fba6e6067154ccfd864d57557222b80f7d7070f82fd9f5e7e0c0e5a0d3cb73940d3d164f693d53230e2f0c359b1cf4f0ee0fff7608f466d5c74bf40e17e8f00705ab2c0c5a578d1da7852b", 0xc0}, {&(0x7f0000000100)="e99d0d469f2b01931b89256b6a7bcc14fc8a", 0x12}, {&(0x7f00000005c0)="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", 0xfd}], 0x3, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, r5, r3, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0xe0, 0x20004040}}, {{&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001b40)=[{&(0x7f00000009c0)="ef2ea86799eeb151ec72c2d9370e0c278e3eb0ca8b92b6b277e0ad48ad6e273e804124fbbd84e3696f86a04793d6440ac551679ab799f93cdf92d54b42554beda39ab5e9b985355b56080ad2684f25a7eb3ef60216e46ab906e00ed1a78b8a955c63a0d41cd856e2a5a1bba92d22e1ad6e4e2a7a01381e1e1b9a", 0x7a}, {&(0x7f0000000a40)="a819572528d6713e7eacd0a544a910bd5c4230657a3c541360557a522e7ee28a65a9c74791dfc669cf83e5650f735d66879e9f2a74f995c05b198158ddee77eb548b23510cf4d21d37f596e697141fbb8514fa1f5545668d37232e1b935afd4b64fdab4ffa0e368ff021ba7e606fc8356ee4c78616e55b8ef5b562bffe9026daa0855d201ec77bf5143217acb4cab4622132", 0x92}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="65b06fe18b806bd7806445368f18c978a339007767e3c7", 0x17}], 0x4, &(0x7f0000001ec0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001f80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000045c0)=[{&(0x7f0000004080)="fc4fd3df9c48b5326c206c34ca64a3b3453adb8c8a218f90c24380b23e034766f341e247d96f6714ef0f4796544bcfd9b96939d65354691e38b172c61604d6e4cda1463677919f49da7f1461753663dc72dbe87829c96b28bba8f4f0c70dc953c586449ad40b03ad29060f080125f9ee0c62ca587d7959498a29e167b142487f02265c822a", 0x85}, {&(0x7f0000004140)="39099a9e69992f2ad7b619864b4e469b80087a5f73c18ef91bb73a0b4fe35d15f480bf66d41d48fdf391bb36114cf89590d5e88a92d4f67f8fb2ff5fbae8de106c1f70168a480c92ffb295b07e9f42cd66f96e61b135058096aef784a433f7aa77a1ae15ea3d2ef3ffab628e1e01", 0x6e}, {&(0x7f00000041c0)}, {&(0x7f0000004200)="67a69ef7f74ab7b26a07b20d684436141b1e8cb150e859e3b59cd3fa51b6e49620834fc04eb4ee57e0b4e13ba01624a2db18acba8f75315d6e0b92af38d44d6857d405a9f997613afaf96a63042c4701e91b1f588991e45ede8336c99a2d8e34b5651556a667e94c60ed826c6f734b1b070a141386fc1ebe1f2bcdf514cb80ff357789c10565a823497b8c85babf7809df9f8a902f4798fca67329668d4ae83242c3a00e50f61c634f29", 0xaa}, {&(0x7f00000042c0)="915bcf495b6b9fd236b26be9b06b7a4c724fd3551bb2e591d01fad14fc84e8cfbf517b66d09c1b56f727960c011a1fc1264cb3aa5b02c732335b970bf601dda1a2bbb8faedca810e9d8ecd953cc02b06c75e004fb3c43110941c9f60a4ff5b018712d40c37c71f07ad507978448fa432444885e44eb2fc80187a575147d5744c69fc5abe732acb1e86ae134474e37ac3945cd864badfd87937d4b6368bbb4ef7a91762d6cc971b3ac9c3a2e767ac50d8915269ed93a01ca85d7181a694b6a3ea0662589858185b9082f4746ef07d45b0ef258a1e4f7007546843f72d873f", 0xde}, {&(0x7f00000043c0)="62d44b0451432a3f3bfb77b29ac4372d868e0db5845831757e108d46bc03e5a2ac5d69a69f13e9386e462dbb524b86d38123dd13af302616d18677ec5e94815c7b51f94e0abf475c289c276d460f11b02703bdaf4f9f42b27a5141", 0x5b}, {&(0x7f0000004440)="295cc5b54dda86d97e4bb9a6e5519281e51b012e7a89e6e63848a8deb1f252b4acc52e331e98b1b7c3cccb2deb593a9031e912a5a902b756d1060d0a625755fcc3a35bd3cef0e1b1af15c8f9f694143c6dbbca", 0x53}, {&(0x7f00000044c0)="f3c179150a52463c1e5a1c72a9461692aedf84dbc5f2b739788fba3d547e0874c38e65f17c2ea9997414940fa66e887a44f0040141271d798f0759ce9c82dce81867107fd9d4284f2c1e5cd49200a2ca09007d86c5b203c036779153c4b9a951ae4adb8c7a35f5e2159ef17e2e70a92d0e0eea16d35c94c40f563174d661c37ffc467ad385cf33af27c1bed1ee882df127352d44d4f0b144e27360015cb1c8830f1024ef7f7118b3f301cf89b906a3483f7ee7daaf20c56afffc9e118f0879eee8d6d09a", 0xc4}], 0x8, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f0000004640), 0x0, &(0x7f0000004680)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x20, 0x8955a6518f515568}}, {{&(0x7f00000046c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000005740)=[{&(0x7f0000004740)="9df25fa8396475aa484f7b4dd047c4e959e3cbfb02c1a22688c10ef7fac3a1dc9cf0ae7220c1a6136d4826cc39148f6fc46f1bb39070674662dc6de4c9a4240ab8ce6353ed609c04fa1fe673b31adaff7a4268c8f45c7dbe70826d1ed702c9d902b1aead72d09c009a27a1ba29680696e3494ffaf7a8ede05977f4e910a7a28c635a7b370e699beb5af90031b31dff790b4e4d2efb6b9eb5c74a9b5710f4a488915122e4b1251893b8158ac09231bd566b1aa8fa049dc9e1e84086bc5ba0ca61e9de2d9f6949bd895195e390cd400fd0b762d301d0e2a23d8ab570abff5379483edc41e436894aca493237f74048a1730b367cff78075a9913b40e41e322af1a278f5904cef6f9ac41e5669bbc2f91f8a4feed840be0f56d687eef7799ec626b7356543d4bc7ff9404fd2bb13e44750dedac479148d5f46b74374c5f22ac7f1f8e243be4b6322c9fc00348faf47a218707bf6071b96faab14e458a0dbd58738176185cc5ba728b0dfb4e2f0752665a4452b77b9b1f178888ac066eab365f64eef015c4088ca925303f979b2c975348487bb3ac40f3fe8fdc43c095ad7b408321335da7ec34e903cc4ecb470987096a073717bb7f5d003db8a468a662776e4b32d65fd8f1263fcb457c051af0a74e2f2689b2f2db6a278bb3aa5435babc03143cd588478996c994a51bd18133e78c3408c9fe706c9f01a4a194e2116fff7a080c51e8d81ce6415f3c7330c1594df34c35b4a00bb63faf0d82eee7c561a2fd42b3a16a4508d32fbfd45306dbe1dcf962b7be4da04c22ad84a44126bcb54f2038d4b1b29f1c36f87e68bd825f39113444ff012d6acc3449945da41aec0b5e1a1cbf7966689ad52e1af301c9925b558241cd6441135e875c9913ce09462acaf442f734002a9c5cc62af6d0d2d2a7bfc6cf295d0cc85578f4ef870dac7b64d0bc5e0116de079aa090028afc2a3348c85540fd649c269b49b1a7734ebbea1e0c50e36db9e6c42d50f901d7df4622cfca7d052f7c2559cf9a142025bc70ef2b974ada938004e901440613e6acaa85e9d8bc7d1f8a23b742f4357f5bf0b62991278b14c55aebe32192b8945db61ea3a4a0bdd17326f9e3ddb9af22477cfaed1cfa17553514e2407500fc395f17d17893a1b2cef916756c16ea766d4a89c4b1db345541a093ff31d6d66c77cdd6781dfcfdf194440b2db117249091921ccbc4425cc04e6c8e5a3139c32df5d6420bb5a93bf012c1bd67eb737acb9b8271f1402c48b8eeb423b87f5f2686f09d11faba856e40012fa47b92727250319e2e1c32f4533fe55d4d98f07e87a493b08b55a770dff24365c1764fc00a4a4251cf8738f1a13bd6b615c061e00ed5bfa2c27dc23c84669436253582e345d881addd4ef1582f2f6bf644402ee679bf445fbc579d877fdf9256462d44ddffd4e256a64258002a5bdeb07d320feb2cf801cd2737c0b09b92934bdc166a4022cf7039c55c801b12ecefa7d3feeb091c85f59f4c97ea956b2a3edee806bdab9c8bafe3b34d8c3596b5efa3825dfe02e07f1b881c0af79967685e0b9f036cd1d87b0d0cb0e8e81c7705fee52ce349975983cd05c3de251236a8f6030d9a1171e8d0b0e3be086d58a67da3b42b036fbfa33a9fef894cd21d26ab6fad02c305a10cab2b31c3ceaf0aa5a714b2e14398c86af0b9ef218d564429983fe78bb86524c81c0238ca7761058bfcb1bdcc291125ee243e441a62e28e73e2093bf8291ee93da7e98eac08a78d30c75ec9374fd1dea96fce5280b0f5b11ffe58c9020d96a7da6946510b38bc6e43dde0a8344dc7e46e025edf81d98a21566a58424ca4ce599dd46c4f891155cd017e004c32a143bb3a24a7507fe72c4b99181b6bcd2dce851d3caab10f3bc281df46bdbee2d10801b1af715c8e383764f113d57ac639a0f3385fdb0b3f459c1f247b2eb8f68325fe8a6dd8c42b548c88d9487924df10c003477bca4900b0fb202a8cde0be54d0f126d2230c7b5369b0e0a7576b92998195a35108528b43b280772684c02ad349adb0d847801aae1caacfb3aeb20e0935bbc59fb83d6bbe6d0b2057804cd42bdf12852bef244437f219cf59ebd6f24b89d8cf08aa7af365b8e2a4662972cf3778944702d44fb88668d16cd32f60245c9c1432fdb0efc6eb3a449f1045ba662f28c1d4c6d19d1a7b2a99b608743a21f840ed12fb0532d66baca2b5d2d216e02ae84dc2e5c772ecd4c4eda3496b52581b4848893bcd2859f71405b7b050e60acfb134744629b6709acc34261719c03eb27af08d59406189ee73961bfd0c452acd624cceb392c024200f537b2b7c70acf61c348cdfba69e20ac6f9f75c9f04c23cb19dc883c1a17e0ea45664a686ac612a2f8ac9d1d06e315416b32c4fa18f916289bfad95098a133acd48f6fd173eb06190573571a9029e992fe42b2f92018032a2bb43f260146b4e0f8075afb7b1168542edaf902a1b04cb1d7c8199952e973947740c6907a30fc0878b5d6b60f99f0f91996ef9b5f08c9387033bde2e4d845dd912b34e9ca308ac5f7cee230ece75fc81755394ea5e34909b73498124410cb30aafdf66df56d8f49483e0e66681a982198c18418ea233775d97fa1925fec7553932ef8620e533595225f5ad3ce106d42a2eeb08bb3a69fc51b0620421ad151b30b1d0a347388f129088fcc181211f77a30c1a15889b61398cdf6b6b303f9ab121cfe6c754c26864df708b79035bd79f250371933ee2a53a36c24ac07264c981aa4a95b0f7a941c4ca65d459974df32b61cd359b45cd8e6d0cbf80a9d8a6a6f2b178fe130debb7e761bd88b2c1eff28c42d7330096f01f7af0122933907605f77669bfc2aca57e6e8bfe23d90527c828deeac514cb92e6b2410eb1d22b8bccd8bd5261a689c0ae994e56c6da902c46ca19aea27b8bf85165a77fc46e7fe2ea451f069132b92e9636ba5add3558169c968bd9a879d1d2bc91e738ea1a5925c92226608efc913738ac58ca7b19894a5b63697c30a065f7d06dadf1364b67a3003fa5fee5cc95d5b5849617b8d64e43a555f843bce5e61da42bc5465bdee8715bf7c575f1e188657026172018c6bd985ae309bb0ba3efaeb97c6a9720ec5f0e1b98d399499b49af7d716e5ce96480b127448227a3e6227187c55ae662d0aec20b65783070c86b79fd8dc077eafd1a859cb3273e58a87ceff67ee1590a17b7942ca42a1b6b04b204fec3c154b8afdff1903572303b9020ddf99521a83dc568a69a51d87c8fdeaedecda3fb37fbc910ebed5d3fe2c41ab92869de7d697658ec106ee9855d91028ff74660e62d2f8c1f96682d22cea6cb5dcdf9a3b33bf47263ff4fd40a9842b01cd193441d44945b03e8256abb856a34fd1dcabfaf9498a9571da824762ccacd436ea42fea8c144509ddaf81a4f993d02ada764107ef98ed275b06b005d7ba9c3ccf1238afb63cb26082037583ddb77093cbecddce01393ec584ed9415f9413c9913080b9260346dcd65e235c7be9204c5a3abdf21c0610b1195dc580652daeb1ea194184e57b7e401be39be619245f963cca37a5d3be31b3cb546ce831df5ad7ad544c5ff7cd21d638f2341b79bae99e7674f35861c253b14a9833a7017f133397292c3fb0601d5136bd20c1f1e07c59c2d4bca638be1d46fb7deaed62df5c206710fdb9bf61c4848deaca1c0b86e3802af6236731f50b002258dee86e2815360cc3c75a1e705099a3c182ececfad0e430393e442df26cfe6d0c0d2cd2d2be405abb70906767f28d5add7b1c3289846c5a4d45bafbefa9427e412be98463c5cfeb111209be514f0f3c3e18289be418c6ee951097199c085e839a429d602da58a7dc683598492ab27910e847105699b7347970b5fcd8bbac10dd959834bd7b27da8b3831e6eaa6af5eb6fbd4abb348b0f8c2cd596eaa2690656db5ff345373de6ed3f2ca9a660290a3979850899eb1d55c2441bf6d2059311b8f2806db0126e83954d8ad826f70a5ec3bee0562140e13b4b137fdaa5de6a0971ec14a4c9fe6734f89ab0c424e790c6a0c7af5dd2ed672b20cffe134a61dd3dc6582c6bd2bbd104cf163239b3bcf30a1925b002ec272b2216a615e1defbc7da0348df09b4e9e4bed10a79f2c3e9837abc43df0c58137e51c7f7a34728ccf5b4934976d0f642b283e0c05ca78cf4b0a2a9011457d4f018a1af864d45c905778e043a7ec2acc6e6e6e023d7e4e05e4c47e0d946faf3047c766728c17ca20e281d021456e63db23dd25e8a96b42011dc579b06f4a81d88da60240cc40118fc7ddfa5576f1ac564f85801afb7d1f9b6c971268d339dcebc4179a4ba1b0dbd394c825813bbe49cadb5af8642fe41f918e16970dc4efb57d05fc9bd5340a7de37a924bb893f4683d0f1cc548d986455241e85ed0dd22ec82994a3fe303f8482569b5b1a0cb0e13d2dc4157f6d2ff6e06b381630fb74a626bb5a4778c26e93fb066d3da34dcdb181ff5bc34c42e5c641fb4cfd97240ad0ea3143a7928eb0b1b0e1307ff7a73042ecb534e662c4b163a8ed51839e5e668257d9c2dc7904288d9d97f4d3fa87e98280e927256577e16bb6199f1a5086266bbc7caa171f1e6704d64d5cba54ee0518cdb245d632d7b928e3959c82fa7d318870c21e971fa34491a3ca545b99c7f0790be358c57136168253670cb91ebe7f0affde2be6ee1146d06d02144c0c682b93cb7347be3f2813a09f6961de90dd84c14d3721fc4791a1cccdb4daef43c96099d30a4e077c4171ae51492c949479d3fa7a0fe07ef92a248206bf2a75614c001866050f82e22bd9e6e4ac60d5d5a0144acd5b83875a9a6301fb737df108b06924b8943ff095029b958b066531fc83a3eff1633ba7d7cc1d8ba4ac05bee9abc8d4ce51653b414352d59941a7d047a704033053e054b561d8fbc5862a18dbcbca383d29dd92f3ac3edc4990a20ef8ab89d5aaac0c3dcb7b58bf677df3a3632f90da54a13b7b2198112bee59c719fd33fa5e2c4b030cced61ee2f4d84a2fcc714e27cb2345ff587b4bd086546cfe5cad1ec46a2485074cbf7cdf88caf610f39c802bd1e6c40b0ac5f5272fba4af52653621f9847eaaee700a4b6afc78663f2e6c4c2738b097f87dd45c2dea90b76f538727d21ad6a7314414289aace29d2eb0493995f7267e12db0fb1e38cf31500294eacfd5a77eb43cfe389720302eb9e89184b1f8820a09c958dc5d1adcddedcd56acc0f5185efd43d5a97acc342a21ba3bc927bfe3308f346f3073afc232f2cbbcda91fd62f5636c81c8d52b359cc2ddf8884131f56960c1e557b867fd9c5a135071f0f498705555613f39e3b7ce465bc65d0bd50570597fb0419abbb47a8ac76e007a0b9848ce0ad24ac20c1ed9bec02e76e714603266d17f3ac7cf465be98e32f3a5018effbf048109e8687a27678545309fae9149ea7e2e2a32f928e5469719073da87bfde32a71cacc748c749ee32c6c2fd1dd1e1d86a028884c4b4a81e1246f348492232923cb6fe88c3204a53de5b27d607973dca92bc496f1b78747906b0e92778a5955f3748169204d1c3db92e28b5431d66bedc509ed800820fbf966d52d1e8197f519a6b24a911f5cb21b62df080ca4320db3eb484fbc3f9c9bf9a8e3644369f6229ba58f23732da38933fcbd540960de5d78f4567ac818c0a7262f142559cb47cc3fa24e6522ce4eea40b7d742a8533880658f1f7ca4048e9cbc9ffb64e6e10ac47259d3be547c07264369042cecb70d48a125ca7e303b4ef2065c531a73af5b4e8c7a97bff4df95e37b458", 0x1000}], 0x1, &(0x7f0000005880)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r1]}}, @rights={{0x30, 0x1, 0x1, [r0, r6, r7, r8, r0, r0, r4, r9]}}], 0x90, 0x4000}}], 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x2e, @loopback}, 0x1c) r11 = accept$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c) sendto$inet6(r11, &(0x7f0000000200)="d8865617997bb15d289750dcaf3ffe9b2d4c720b39340e7f653211e04164a78e8c398f1b4555d12a6e9a58af930402a1ce0f27ae1aea079ab544085118370da163466bf9f99fb56c784119547d7b7ccb1c68b6174b04b9e9565a63320e72d89380bde51c59c17e29ba87cf0fb85f4da24eed5a18325d18949e19f6a2b2d0a87d9ddb659558fb3d65c8726fc25dcba6b206947ed1d2bd626fc43f6115307371c947871dcc9282280c8a4a60dbacc93fbcc0c3500398e252af2124bbe09626b62c652599a07ffc5ee1c1245ce8481cb1d27bd594f66ddbb921e8006f65b9c5c1a9ee", 0xe1, 0x0, &(0x7f0000000380)={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffcf0}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, "9cebc4bf5aa35fce", "494d25fbca9322e301f22f0155c02ebc599041cdc22a1870ebb9236eb8e0710b", '\x00', "0000000000007fff"}, 0x38) sendfile(r10, r3, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:46 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x5000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:46 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xf00000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 811.254344] audit: type=1804 audit(1670206246.371:837): pid=1004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/403/bus" dev="sda1" ino=14787 res=1 [ 811.286053] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 811.303728] FAULT_INJECTION: forcing a failure. [ 811.303728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 811.351421] CPU: 1 PID: 1004 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 811.359251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 811.368700] Call Trace: [ 811.371299] dump_stack+0x1fc/0x2ef [ 811.375032] should_fail.cold+0xa/0xf [ 811.378845] ? lock_acquire+0x170/0x3c0 [ 811.382915] ? setup_fault_attr+0x200/0x200 [ 811.387265] __alloc_pages_nodemask+0x239/0x2890 [ 811.392031] ? __lock_acquire+0x6de/0x3ff0 [ 811.396286] ? check_preemption_disabled+0x41/0x280 [ 811.401312] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 811.406176] ? lock_acquire+0x170/0x3c0 [ 811.410157] ? finish_task_switch+0x118/0x760 [ 811.414659] ? _raw_spin_unlock_irq+0x24/0x80 [ 811.419165] ? mark_held_locks+0xf0/0xf0 [ 811.423239] ? __do_page_cache_readahead+0x39f/0x6c0 [ 811.428359] alloc_pages_current+0x193/0x2a0 [ 811.432787] __page_cache_alloc+0x76/0x90 [ 811.436946] __do_page_cache_readahead+0x1a1/0x6c0 [ 811.441895] ? read_pages.isra.0+0x5d0/0x5d0 [ 811.446316] ? page_cache_sync_readahead+0x1c5/0x520 [ 811.451441] ondemand_readahead.isra.0+0x575/0xd40 [ 811.456398] page_cache_sync_readahead+0x275/0x520 [ 811.461343] generic_file_read_iter+0x1497/0x2b60 [ 811.466216] ext4_file_read_iter+0x17b/0x3a0 [ 811.470642] generic_file_splice_read+0x44a/0x6d0 [ 811.475506] ? add_to_pipe+0x360/0x360 [ 811.479421] ? security_file_permission+0x1c0/0x220 [ 811.484454] ? add_to_pipe+0x360/0x360 [ 811.488360] do_splice_to+0x10e/0x160 [ 811.492176] splice_direct_to_actor+0x2b9/0x8d0 [ 811.496860] ? generic_pipe_buf_nosteal+0x10/0x10 [ 811.501711] ? do_splice_to+0x160/0x160 [ 811.505700] do_splice_direct+0x1a7/0x270 [ 811.509861] ? splice_direct_to_actor+0x8d0/0x8d0 [ 811.514733] ? security_file_permission+0x1c0/0x220 [ 811.519761] do_sendfile+0x550/0xc30 [ 811.523582] ? do_compat_pwritev64+0x1b0/0x1b0 [ 811.528169] ? vfs_write+0x393/0x540 [ 811.531902] __se_sys_sendfile64+0x147/0x160 [ 811.536321] ? __se_sys_sendfile+0x180/0x180 [ 811.540739] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 811.546111] ? trace_hardirqs_off_caller+0x6e/0x210 [ 811.551142] ? do_syscall_64+0x21/0x620 [ 811.555137] do_syscall_64+0xf9/0x620 [ 811.558957] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 811.564149] RIP: 0033:0x7f337636e0d9 [ 811.567864] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 811.586777] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 811.594498] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 02:10:46 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 811.601776] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 811.609055] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 811.616334] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 811.623620] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:46 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 23) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 811.649196] audit: type=1804 audit(1670206246.771:838): pid=1013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/403/bus" dev="sda1" ino=14787 res=1 02:10:46 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:46 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1100000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 811.792863] audit: type=1804 audit(1670206246.911:839): pid=1022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/404/bus" dev="sda1" ino=15091 res=1 [ 811.794727] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 811.840610] FAULT_INJECTION: forcing a failure. [ 811.840610] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 811.872015] CPU: 1 PID: 1022 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 811.879847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 811.889381] Call Trace: [ 811.891984] dump_stack+0x1fc/0x2ef [ 811.895637] should_fail.cold+0xa/0xf [ 811.899446] ? lock_acquire+0x170/0x3c0 [ 811.903433] ? setup_fault_attr+0x200/0x200 [ 811.907778] __alloc_pages_nodemask+0x239/0x2890 [ 811.912565] ? __lock_acquire+0x6de/0x3ff0 [ 811.916811] ? __lock_acquire+0x6de/0x3ff0 [ 811.921054] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 811.925906] ? mark_held_locks+0xf0/0xf0 [ 811.929985] ? __lock_acquire+0x6de/0x3ff0 [ 811.934237] ? __do_page_cache_readahead+0x39f/0x6c0 [ 811.939445] alloc_pages_current+0x193/0x2a0 [ 811.943867] __page_cache_alloc+0x76/0x90 [ 811.948030] __do_page_cache_readahead+0x1a1/0x6c0 [ 811.953014] ? read_pages.isra.0+0x5d0/0x5d0 [ 811.957434] ? page_cache_sync_readahead+0x1c5/0x520 [ 811.962560] ondemand_readahead.isra.0+0x575/0xd40 [ 811.967518] page_cache_sync_readahead+0x275/0x520 [ 811.972469] generic_file_read_iter+0x1497/0x2b60 [ 811.977344] ext4_file_read_iter+0x17b/0x3a0 [ 811.981771] generic_file_splice_read+0x44a/0x6d0 [ 811.986637] ? add_to_pipe+0x360/0x360 [ 811.990642] ? security_file_permission+0x1c0/0x220 [ 811.995675] ? add_to_pipe+0x360/0x360 [ 811.999576] do_splice_to+0x10e/0x160 [ 812.003394] splice_direct_to_actor+0x2b9/0x8d0 [ 812.008081] ? generic_pipe_buf_nosteal+0x10/0x10 [ 812.012942] ? do_splice_to+0x160/0x160 [ 812.016931] do_splice_direct+0x1a7/0x270 [ 812.021092] ? splice_direct_to_actor+0x8d0/0x8d0 [ 812.025952] ? security_file_permission+0x1c0/0x220 [ 812.030993] do_sendfile+0x550/0xc30 [ 812.034729] ? do_compat_pwritev64+0x1b0/0x1b0 [ 812.039322] ? vfs_write+0x393/0x540 [ 812.043091] __se_sys_sendfile64+0x147/0x160 [ 812.047505] ? __se_sys_sendfile+0x180/0x180 [ 812.051926] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 812.057772] ? trace_hardirqs_off_caller+0x6e/0x210 [ 812.062803] ? do_syscall_64+0x21/0x620 [ 812.066799] do_syscall_64+0xf9/0x620 [ 812.070618] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 812.075817] RIP: 0033:0x7f337636e0d9 [ 812.079534] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 812.098435] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 812.106151] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 812.113464] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 812.120743] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 812.128023] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 812.135417] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:47 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xd}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:47 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x5000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:47 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 24) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:47 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1200000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:47 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 812.656956] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 812.689628] FAULT_INJECTION: forcing a failure. [ 812.689628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 812.716676] CPU: 1 PID: 1048 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 812.724511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 812.733872] Call Trace: [ 812.736487] dump_stack+0x1fc/0x2ef [ 812.740140] should_fail.cold+0xa/0xf [ 812.743954] ? lock_acquire+0x170/0x3c0 [ 812.747941] ? setup_fault_attr+0x200/0x200 [ 812.752288] __alloc_pages_nodemask+0x239/0x2890 [ 812.757065] ? __lock_acquire+0x6de/0x3ff0 [ 812.761323] ? __lock_acquire+0x6de/0x3ff0 [ 812.765575] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 812.770427] ? mark_held_locks+0xf0/0xf0 [ 812.774512] ? __lock_acquire+0x6de/0x3ff0 [ 812.778762] ? __do_page_cache_readahead+0x39f/0x6c0 [ 812.783882] alloc_pages_current+0x193/0x2a0 [ 812.788308] __page_cache_alloc+0x76/0x90 [ 812.792476] __do_page_cache_readahead+0x1a1/0x6c0 [ 812.797513] ? read_pages.isra.0+0x5d0/0x5d0 [ 812.801932] ? page_cache_sync_readahead+0x1c5/0x520 [ 812.807149] ondemand_readahead.isra.0+0x575/0xd40 [ 812.812105] page_cache_sync_readahead+0x275/0x520 [ 812.817057] generic_file_read_iter+0x1497/0x2b60 [ 812.821929] ext4_file_read_iter+0x17b/0x3a0 [ 812.826352] generic_file_splice_read+0x44a/0x6d0 [ 812.831205] ? add_to_pipe+0x360/0x360 [ 812.835112] ? security_file_permission+0x1c0/0x220 [ 812.840167] ? add_to_pipe+0x360/0x360 [ 812.844073] do_splice_to+0x10e/0x160 [ 812.847885] splice_direct_to_actor+0x2b9/0x8d0 [ 812.852569] ? generic_pipe_buf_nosteal+0x10/0x10 [ 812.857425] ? do_splice_to+0x160/0x160 [ 812.861424] do_splice_direct+0x1a7/0x270 [ 812.865594] ? splice_direct_to_actor+0x8d0/0x8d0 [ 812.870560] ? security_file_permission+0x1c0/0x220 [ 812.875600] do_sendfile+0x550/0xc30 [ 812.879334] ? do_compat_pwritev64+0x1b0/0x1b0 [ 812.883933] ? vfs_write+0x393/0x540 [ 812.887660] __se_sys_sendfile64+0x147/0x160 [ 812.892074] ? __se_sys_sendfile+0x180/0x180 [ 812.896486] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 812.901869] ? trace_hardirqs_off_caller+0x6e/0x210 [ 812.906902] ? do_syscall_64+0x21/0x620 [ 812.910892] do_syscall_64+0xf9/0x620 [ 812.914717] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 812.919914] RIP: 0033:0x7f337636e0d9 [ 812.923634] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 812.942548] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 812.950454] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 812.957735] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 812.965020] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 812.972302] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 812.979587] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 [ 814.332280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.340565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.348795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.355529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.368006] device veth1_macvtap left promiscuous mode [ 814.373319] device veth0_macvtap left promiscuous mode [ 814.379550] device veth1_vlan left promiscuous mode [ 814.384614] device veth0_vlan left promiscuous mode [ 816.626407] Bluetooth: hci3: command 0x0409 tx timeout [ 818.696301] Bluetooth: hci3: command 0x041b tx timeout [ 819.125061] device hsr_slave_1 left promiscuous mode [ 819.132656] device hsr_slave_0 left promiscuous mode [ 819.153429] team0 (unregistering): Port device team_slave_1 removed [ 819.163530] team0 (unregistering): Port device team_slave_0 removed [ 819.174075] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 819.184718] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 819.215102] bond0 (unregistering): Released all slaves [ 819.232208] IPVS: ftp: loaded support on port[0] = 21 [ 819.341015] chnl_net:caif_netlink_parms(): no params data found [ 819.425349] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.432631] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.441433] device bridge_slave_0 entered promiscuous mode [ 819.449782] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.457066] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.464527] device bridge_slave_1 entered promiscuous mode [ 819.488830] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 819.498925] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 819.522967] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 819.531293] team0: Port device team_slave_0 added [ 819.538676] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 819.547456] team0: Port device team_slave_1 added [ 819.568550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.574815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.601530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.614237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.621343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.647951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.664342] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 819.672852] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 819.701109] device hsr_slave_0 entered promiscuous mode [ 819.707196] device hsr_slave_1 entered promiscuous mode [ 819.713506] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 819.723443] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 819.823529] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.829973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.836691] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.843060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.931006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.940769] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 819.952423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 819.961050] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.969204] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.983601] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 819.990639] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.003123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 820.012087] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.018528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.038299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 820.047380] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.053752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.072409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 820.080826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 820.097546] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 820.104724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 820.113811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 820.124025] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 820.131888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 820.202597] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 820.211827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 820.220824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 820.233107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.290723] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 820.317784] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 820.324841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 820.335391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 820.410166] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 820.417828] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 820.424672] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 820.434933] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 820.442459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 820.450904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 820.468297] device veth0_vlan entered promiscuous mode [ 820.485195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 820.493607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 820.512694] device veth1_vlan entered promiscuous mode [ 820.519980] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 820.530985] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 820.545936] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 820.557730] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 820.564861] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 820.574097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 820.582647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 820.590632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 820.600462] device veth0_macvtap entered promiscuous mode [ 820.607843] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 820.617950] device veth1_macvtap entered promiscuous mode [ 820.624385] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 820.634432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 820.646468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 820.655729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.666320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.675436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.685526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.694957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.705315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.714874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.724708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.734895] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 820.742803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.751883] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 820.759441] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 820.767264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 820.775066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 820.783931] Bluetooth: hci3: command 0x040f tx timeout [ 820.784932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.799675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.809278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.819116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.828349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.838263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.847469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.857363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.867915] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 820.874810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.883245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 820.891254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 821.032627] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 821.040260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.058018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.084586] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 821.091370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.099030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 821.101994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.112515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 821.205408] kauditd_printk_skb: 3 callbacks suppressed [ 821.205422] audit: type=1804 audit(1670206256.321:843): pid=1342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4051628315/syzkaller.p6RxGQ/0/bus" dev="sda1" ino=13921 res=1 02:10:56 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000480)={0x800, [0x400, 0x100, 0x890, 0xa0, 0xfffa, 0x7ff, 0x1, 0xfff9, 0x4, 0x1, 0x9, 0x101, 0x7, 0x7, 0x3, 0xed, 0x20, 0x83a, 0x89b, 0x1, 0x8dd1, 0x1, 0x1f, 0x7fff, 0xfff8, 0xec, 0x5, 0x1, 0x4, 0x200, 0xc1, 0x2, 0x6, 0x7ff, 0x80, 0x7, 0x2c9, 0x5, 0x27d1, 0x6, 0x0, 0x101, 0x20, 0x81, 0xaea, 0x100, 0x5, 0x2], 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = signalfd4(r0, &(0x7f0000000000)={[0xc4e]}, 0x8, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d) (async) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) (async) r7 = syz_open_dev$vcsn(&(0x7f0000005840), 0x6, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) sendmmsg$unix(r0, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="8e11657c3c92feba829d0e51c24383a2bfd271a963de32098975bb01425ee164cb08972754ac2ab9e8abd61797d4a310e16c83a9c8e5583cdd1bdda95ee82f6106d3e2da248253f64e5a841cd58e5b14b8d65c7f9af51085b586b283103ca652d920ac35e19cc3bd0c15ed5ec6ffd622d25ac7c201fba6e6067154ccfd864d57557222b80f7d7070f82fd9f5e7e0c0e5a0d3cb73940d3d164f693d53230e2f0c359b1cf4f0ee0fff7608f466d5c74bf40e17e8f00705ab2c0c5a578d1da7852b", 0xc0}, {&(0x7f0000000100)="e99d0d469f2b01931b89256b6a7bcc14fc8a", 0x12}, {&(0x7f00000005c0)="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", 0xfd}], 0x3, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, r5, r3, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0xe0, 0x20004040}}, {{&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001b40)=[{&(0x7f00000009c0)="ef2ea86799eeb151ec72c2d9370e0c278e3eb0ca8b92b6b277e0ad48ad6e273e804124fbbd84e3696f86a04793d6440ac551679ab799f93cdf92d54b42554beda39ab5e9b985355b56080ad2684f25a7eb3ef60216e46ab906e00ed1a78b8a955c63a0d41cd856e2a5a1bba92d22e1ad6e4e2a7a01381e1e1b9a", 0x7a}, {&(0x7f0000000a40)="a819572528d6713e7eacd0a544a910bd5c4230657a3c541360557a522e7ee28a65a9c74791dfc669cf83e5650f735d66879e9f2a74f995c05b198158ddee77eb548b23510cf4d21d37f596e697141fbb8514fa1f5545668d37232e1b935afd4b64fdab4ffa0e368ff021ba7e606fc8356ee4c78616e55b8ef5b562bffe9026daa0855d201ec77bf5143217acb4cab4622132", 0x92}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="65b06fe18b806bd7806445368f18c978a339007767e3c7", 0x17}], 0x4, &(0x7f0000001ec0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001f80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000045c0)=[{&(0x7f0000004080)="fc4fd3df9c48b5326c206c34ca64a3b3453adb8c8a218f90c24380b23e034766f341e247d96f6714ef0f4796544bcfd9b96939d65354691e38b172c61604d6e4cda1463677919f49da7f1461753663dc72dbe87829c96b28bba8f4f0c70dc953c586449ad40b03ad29060f080125f9ee0c62ca587d7959498a29e167b142487f02265c822a", 0x85}, {&(0x7f0000004140)="39099a9e69992f2ad7b619864b4e469b80087a5f73c18ef91bb73a0b4fe35d15f480bf66d41d48fdf391bb36114cf89590d5e88a92d4f67f8fb2ff5fbae8de106c1f70168a480c92ffb295b07e9f42cd66f96e61b135058096aef784a433f7aa77a1ae15ea3d2ef3ffab628e1e01", 0x6e}, {&(0x7f00000041c0)}, {&(0x7f0000004200)="67a69ef7f74ab7b26a07b20d684436141b1e8cb150e859e3b59cd3fa51b6e49620834fc04eb4ee57e0b4e13ba01624a2db18acba8f75315d6e0b92af38d44d6857d405a9f997613afaf96a63042c4701e91b1f588991e45ede8336c99a2d8e34b5651556a667e94c60ed826c6f734b1b070a141386fc1ebe1f2bcdf514cb80ff357789c10565a823497b8c85babf7809df9f8a902f4798fca67329668d4ae83242c3a00e50f61c634f29", 0xaa}, {&(0x7f00000042c0)="915bcf495b6b9fd236b26be9b06b7a4c724fd3551bb2e591d01fad14fc84e8cfbf517b66d09c1b56f727960c011a1fc1264cb3aa5b02c732335b970bf601dda1a2bbb8faedca810e9d8ecd953cc02b06c75e004fb3c43110941c9f60a4ff5b018712d40c37c71f07ad507978448fa432444885e44eb2fc80187a575147d5744c69fc5abe732acb1e86ae134474e37ac3945cd864badfd87937d4b6368bbb4ef7a91762d6cc971b3ac9c3a2e767ac50d8915269ed93a01ca85d7181a694b6a3ea0662589858185b9082f4746ef07d45b0ef258a1e4f7007546843f72d873f", 0xde}, {&(0x7f00000043c0)="62d44b0451432a3f3bfb77b29ac4372d868e0db5845831757e108d46bc03e5a2ac5d69a69f13e9386e462dbb524b86d38123dd13af302616d18677ec5e94815c7b51f94e0abf475c289c276d460f11b02703bdaf4f9f42b27a5141", 0x5b}, {&(0x7f0000004440)="295cc5b54dda86d97e4bb9a6e5519281e51b012e7a89e6e63848a8deb1f252b4acc52e331e98b1b7c3cccb2deb593a9031e912a5a902b756d1060d0a625755fcc3a35bd3cef0e1b1af15c8f9f694143c6dbbca", 0x53}, {&(0x7f00000044c0)="f3c179150a52463c1e5a1c72a9461692aedf84dbc5f2b739788fba3d547e0874c38e65f17c2ea9997414940fa66e887a44f0040141271d798f0759ce9c82dce81867107fd9d4284f2c1e5cd49200a2ca09007d86c5b203c036779153c4b9a951ae4adb8c7a35f5e2159ef17e2e70a92d0e0eea16d35c94c40f563174d661c37ffc467ad385cf33af27c1bed1ee882df127352d44d4f0b144e27360015cb1c8830f1024ef7f7118b3f301cf89b906a3483f7ee7daaf20c56afffc9e118f0879eee8d6d09a", 0xc4}], 0x8, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f0000004640), 0x0, &(0x7f0000004680)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x20, 0x8955a6518f515568}}, {{&(0x7f00000046c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000005740)=[{&(0x7f0000004740)="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", 0x1000}], 0x1, &(0x7f0000005880)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r1]}}, @rights={{0x30, 0x1, 0x1, [r0, r6, r7, r8, r0, r0, r4, r9]}}], 0x90, 0x4000}}], 0x5, 0x0) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x2e, @loopback}, 0x1c) (async) r11 = accept$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c) sendto$inet6(r11, &(0x7f0000000200)="d8865617997bb15d289750dcaf3ffe9b2d4c720b39340e7f653211e04164a78e8c398f1b4555d12a6e9a58af930402a1ce0f27ae1aea079ab544085118370da163466bf9f99fb56c784119547d7b7ccb1c68b6174b04b9e9565a63320e72d89380bde51c59c17e29ba87cf0fb85f4da24eed5a18325d18949e19f6a2b2d0a87d9ddb659558fb3d65c8726fc25dcba6b206947ed1d2bd626fc43f6115307371c947871dcc9282280c8a4a60dbacc93fbcc0c3500398e252af2124bbe09626b62c652599a07ffc5ee1c1245ce8481cb1d27bd594f66ddbb921e8006f65b9c5c1a9ee", 0xe1, 0x0, &(0x7f0000000380)={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffcf0}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, "9cebc4bf5aa35fce", "494d25fbca9322e301f22f0155c02ebc599041cdc22a1870ebb9236eb8e0710b", '\x00', "0000000000007fff"}, 0x38) (async) sendfile(r10, r3, 0x0, 0x800100020046) (async) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:56 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1d00000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:56 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:56 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 25) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:56 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:56 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:56 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:56 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1f00000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:56 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 821.374855] audit: type=1804 audit(1670206256.491:844): pid=1356 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/406/bus" dev="sda1" ino=14257 res=1 [ 821.387443] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:56 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 821.451994] FAULT_INJECTION: forcing a failure. [ 821.451994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 02:10:56 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 821.479033] audit: type=1804 audit(1670206256.561:845): pid=1364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4051628315/syzkaller.p6RxGQ/1/bus" dev="sda1" ino=14273 res=1 [ 821.491948] CPU: 1 PID: 1356 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 821.510461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 821.519817] Call Trace: [ 821.522414] dump_stack+0x1fc/0x2ef [ 821.526059] should_fail.cold+0xa/0xf [ 821.529879] ? lock_acquire+0x170/0x3c0 [ 821.533869] ? setup_fault_attr+0x200/0x200 [ 821.538217] __alloc_pages_nodemask+0x239/0x2890 [ 821.542985] ? __lock_acquire+0x6de/0x3ff0 [ 821.547236] ? __lock_acquire+0x6de/0x3ff0 02:10:56 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 821.551482] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 821.556333] ? mark_held_locks+0xf0/0xf0 [ 821.560410] ? __lock_acquire+0x6de/0x3ff0 [ 821.564658] ? __do_page_cache_readahead+0x39f/0x6c0 [ 821.569777] alloc_pages_current+0x193/0x2a0 [ 821.574196] __page_cache_alloc+0x76/0x90 [ 821.578354] __do_page_cache_readahead+0x1a1/0x6c0 [ 821.583299] ? read_pages.isra.0+0x5d0/0x5d0 [ 821.587719] ? page_cache_sync_readahead+0x1c5/0x520 [ 821.592838] ondemand_readahead.isra.0+0x575/0xd40 [ 821.597782] page_cache_sync_readahead+0x275/0x520 [ 821.602725] generic_file_read_iter+0x1497/0x2b60 [ 821.607591] ext4_file_read_iter+0x17b/0x3a0 [ 821.612014] generic_file_splice_read+0x44a/0x6d0 [ 821.616869] ? add_to_pipe+0x360/0x360 [ 821.620779] ? security_file_permission+0x1c0/0x220 [ 821.625807] ? add_to_pipe+0x360/0x360 [ 821.629698] do_splice_to+0x10e/0x160 [ 821.633492] splice_direct_to_actor+0x2b9/0x8d0 [ 821.638158] ? generic_pipe_buf_nosteal+0x10/0x10 [ 821.642983] ? do_splice_to+0x160/0x160 [ 821.646963] do_splice_direct+0x1a7/0x270 [ 821.651105] ? splice_direct_to_actor+0x8d0/0x8d0 [ 821.655935] ? security_file_permission+0x1c0/0x220 [ 821.660949] do_sendfile+0x550/0xc30 [ 821.664649] ? do_compat_pwritev64+0x1b0/0x1b0 [ 821.669218] ? vfs_write+0x393/0x540 [ 821.672917] __se_sys_sendfile64+0x147/0x160 [ 821.677483] ? __se_sys_sendfile+0x180/0x180 [ 821.681878] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 821.687235] ? trace_hardirqs_off_caller+0x6e/0x210 [ 821.692240] ? do_syscall_64+0x21/0x620 [ 821.696200] do_syscall_64+0xf9/0x620 [ 821.699984] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 821.705153] RIP: 0033:0x7f337636e0d9 [ 821.708857] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 821.727757] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 821.735458] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 821.742712] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 02:10:56 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000480)={0x800, [0x400, 0x100, 0x890, 0xa0, 0xfffa, 0x7ff, 0x1, 0xfff9, 0x4, 0x1, 0x9, 0x101, 0x7, 0x7, 0x3, 0xed, 0x20, 0x83a, 0x89b, 0x1, 0x8dd1, 0x1, 0x1f, 0x7fff, 0xfff8, 0xec, 0x5, 0x1, 0x4, 0x200, 0xc1, 0x2, 0x6, 0x7ff, 0x80, 0x7, 0x2c9, 0x5, 0x27d1, 0x6, 0x0, 0x101, 0x20, 0x81, 0xaea, 0x100, 0x5, 0x2], 0x2}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 32) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = signalfd4(r0, &(0x7f0000000000)={[0xc4e]}, 0x8, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d) (async) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000005840), 0x6, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) sendmmsg$unix(r0, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="8e11657c3c92feba829d0e51c24383a2bfd271a963de32098975bb01425ee164cb08972754ac2ab9e8abd61797d4a310e16c83a9c8e5583cdd1bdda95ee82f6106d3e2da248253f64e5a841cd58e5b14b8d65c7f9af51085b586b283103ca652d920ac35e19cc3bd0c15ed5ec6ffd622d25ac7c201fba6e6067154ccfd864d57557222b80f7d7070f82fd9f5e7e0c0e5a0d3cb73940d3d164f693d53230e2f0c359b1cf4f0ee0fff7608f466d5c74bf40e17e8f00705ab2c0c5a578d1da7852b", 0xc0}, {&(0x7f0000000100)="e99d0d469f2b01931b89256b6a7bcc14fc8a", 0x12}, {&(0x7f00000005c0)="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", 0xfd}], 0x3, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, r5, r3, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0xe0, 0x20004040}}, {{&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001b40)=[{&(0x7f00000009c0)="ef2ea86799eeb151ec72c2d9370e0c278e3eb0ca8b92b6b277e0ad48ad6e273e804124fbbd84e3696f86a04793d6440ac551679ab799f93cdf92d54b42554beda39ab5e9b985355b56080ad2684f25a7eb3ef60216e46ab906e00ed1a78b8a955c63a0d41cd856e2a5a1bba92d22e1ad6e4e2a7a01381e1e1b9a", 0x7a}, {&(0x7f0000000a40)="a819572528d6713e7eacd0a544a910bd5c4230657a3c541360557a522e7ee28a65a9c74791dfc669cf83e5650f735d66879e9f2a74f995c05b198158ddee77eb548b23510cf4d21d37f596e697141fbb8514fa1f5545668d37232e1b935afd4b64fdab4ffa0e368ff021ba7e606fc8356ee4c78616e55b8ef5b562bffe9026daa0855d201ec77bf5143217acb4cab4622132", 0x92}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="65b06fe18b806bd7806445368f18c978a339007767e3c7", 0x17}], 0x4, &(0x7f0000001ec0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001f80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000045c0)=[{&(0x7f0000004080)="fc4fd3df9c48b5326c206c34ca64a3b3453adb8c8a218f90c24380b23e034766f341e247d96f6714ef0f4796544bcfd9b96939d65354691e38b172c61604d6e4cda1463677919f49da7f1461753663dc72dbe87829c96b28bba8f4f0c70dc953c586449ad40b03ad29060f080125f9ee0c62ca587d7959498a29e167b142487f02265c822a", 0x85}, {&(0x7f0000004140)="39099a9e69992f2ad7b619864b4e469b80087a5f73c18ef91bb73a0b4fe35d15f480bf66d41d48fdf391bb36114cf89590d5e88a92d4f67f8fb2ff5fbae8de106c1f70168a480c92ffb295b07e9f42cd66f96e61b135058096aef784a433f7aa77a1ae15ea3d2ef3ffab628e1e01", 0x6e}, {&(0x7f00000041c0)}, {&(0x7f0000004200)="67a69ef7f74ab7b26a07b20d684436141b1e8cb150e859e3b59cd3fa51b6e49620834fc04eb4ee57e0b4e13ba01624a2db18acba8f75315d6e0b92af38d44d6857d405a9f997613afaf96a63042c4701e91b1f588991e45ede8336c99a2d8e34b5651556a667e94c60ed826c6f734b1b070a141386fc1ebe1f2bcdf514cb80ff357789c10565a823497b8c85babf7809df9f8a902f4798fca67329668d4ae83242c3a00e50f61c634f29", 0xaa}, {&(0x7f00000042c0)="915bcf495b6b9fd236b26be9b06b7a4c724fd3551bb2e591d01fad14fc84e8cfbf517b66d09c1b56f727960c011a1fc1264cb3aa5b02c732335b970bf601dda1a2bbb8faedca810e9d8ecd953cc02b06c75e004fb3c43110941c9f60a4ff5b018712d40c37c71f07ad507978448fa432444885e44eb2fc80187a575147d5744c69fc5abe732acb1e86ae134474e37ac3945cd864badfd87937d4b6368bbb4ef7a91762d6cc971b3ac9c3a2e767ac50d8915269ed93a01ca85d7181a694b6a3ea0662589858185b9082f4746ef07d45b0ef258a1e4f7007546843f72d873f", 0xde}, {&(0x7f00000043c0)="62d44b0451432a3f3bfb77b29ac4372d868e0db5845831757e108d46bc03e5a2ac5d69a69f13e9386e462dbb524b86d38123dd13af302616d18677ec5e94815c7b51f94e0abf475c289c276d460f11b02703bdaf4f9f42b27a5141", 0x5b}, {&(0x7f0000004440)="295cc5b54dda86d97e4bb9a6e5519281e51b012e7a89e6e63848a8deb1f252b4acc52e331e98b1b7c3cccb2deb593a9031e912a5a902b756d1060d0a625755fcc3a35bd3cef0e1b1af15c8f9f694143c6dbbca", 0x53}, {&(0x7f00000044c0)="f3c179150a52463c1e5a1c72a9461692aedf84dbc5f2b739788fba3d547e0874c38e65f17c2ea9997414940fa66e887a44f0040141271d798f0759ce9c82dce81867107fd9d4284f2c1e5cd49200a2ca09007d86c5b203c036779153c4b9a951ae4adb8c7a35f5e2159ef17e2e70a92d0e0eea16d35c94c40f563174d661c37ffc467ad385cf33af27c1bed1ee882df127352d44d4f0b144e27360015cb1c8830f1024ef7f7118b3f301cf89b906a3483f7ee7daaf20c56afffc9e118f0879eee8d6d09a", 0xc4}], 0x8, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f0000004640), 0x0, &(0x7f0000004680)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x20, 0x8955a6518f515568}}, {{&(0x7f00000046c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000005740)=[{&(0x7f0000004740)="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", 0x1000}], 0x1, &(0x7f0000005880)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r1]}}, @rights={{0x30, 0x1, 0x1, [r0, r6, r7, r8, r0, r0, r4, r9]}}], 0x90, 0x4000}}], 0x5, 0x0) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x2e, @loopback}, 0x1c) r11 = accept$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c) sendto$inet6(r11, &(0x7f0000000200)="d8865617997bb15d289750dcaf3ffe9b2d4c720b39340e7f653211e04164a78e8c398f1b4555d12a6e9a58af930402a1ce0f27ae1aea079ab544085118370da163466bf9f99fb56c784119547d7b7ccb1c68b6174b04b9e9565a63320e72d89380bde51c59c17e29ba87cf0fb85f4da24eed5a18325d18949e19f6a2b2d0a87d9ddb659558fb3d65c8726fc25dcba6b206947ed1d2bd626fc43f6115307371c947871dcc9282280c8a4a60dbacc93fbcc0c3500398e252af2124bbe09626b62c652599a07ffc5ee1c1245ce8481cb1d27bd594f66ddbb921e8006f65b9c5c1a9ee", 0xe1, 0x0, &(0x7f0000000380)={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffcf0}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, "9cebc4bf5aa35fce", "494d25fbca9322e301f22f0155c02ebc599041cdc22a1870ebb9236eb8e0710b", '\x00', "0000000000007fff"}, 0x38) (async) sendfile(r10, r3, 0x0, 0x800100020046) (async) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:56 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3d689747b5000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:56 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb000200}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 821.749967] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 821.757222] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 821.764472] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 [ 821.786680] audit: type=1804 audit(1670206256.911:846): pid=1371 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/406/bus" dev="sda1" ino=14257 res=1 02:10:57 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 26) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:57 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:57 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x11}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:57 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4000000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:57 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 821.905918] audit: type=1804 audit(1670206257.021:847): pid=1402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/407/bus" dev="sda1" ino=14033 res=1 02:10:57 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xe000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 821.950107] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 821.968565] FAULT_INJECTION: forcing a failure. [ 821.968565] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 822.023944] CPU: 0 PID: 1402 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 822.031782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 822.041142] Call Trace: [ 822.043747] dump_stack+0x1fc/0x2ef [ 822.047386] should_fail.cold+0xa/0xf [ 822.051200] ? lock_acquire+0x170/0x3c0 [ 822.055191] ? setup_fault_attr+0x200/0x200 [ 822.059542] __alloc_pages_nodemask+0x239/0x2890 [ 822.064322] ? __lock_acquire+0x6de/0x3ff0 [ 822.068590] ? __lock_acquire+0x6de/0x3ff0 [ 822.072845] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 822.077698] ? io_schedule_timeout+0x140/0x140 [ 822.079993] audit: type=1804 audit(1670206257.081:848): pid=1408 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4051628315/syzkaller.p6RxGQ/2/bus" dev="sda1" ino=13918 res=1 [ 822.082302] ? __lock_acquire+0x6de/0x3ff0 [ 822.082323] ? __do_page_cache_readahead+0x39f/0x6c0 [ 822.106107] audit: type=1804 audit(1670206257.091:849): pid=1408 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4051628315/syzkaller.p6RxGQ/2/bus" dev="sda1" ino=13918 res=1 [ 822.110134] alloc_pages_current+0x193/0x2a0 [ 822.110153] __page_cache_alloc+0x76/0x90 [ 822.115335] audit: type=1804 audit(1670206257.141:850): pid=1420 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/407/bus" dev="sda1" ino=14033 res=1 [ 822.138811] __do_page_cache_readahead+0x1a1/0x6c0 [ 822.138833] ? read_pages.isra.0+0x5d0/0x5d0 [ 822.138847] ? page_cache_sync_readahead+0x1c5/0x520 [ 822.138868] ondemand_readahead.isra.0+0x575/0xd40 [ 822.138886] page_cache_sync_readahead+0x275/0x520 [ 822.138905] generic_file_read_iter+0x1497/0x2b60 [ 822.138932] ext4_file_read_iter+0x17b/0x3a0 [ 822.138952] generic_file_splice_read+0x44a/0x6d0 [ 822.138970] ? add_to_pipe+0x360/0x360 [ 822.138995] ? security_file_permission+0x1c0/0x220 [ 822.139013] ? add_to_pipe+0x360/0x360 02:10:57 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) open(&(0x7f0000000000)='./bus\x00', 0x101000, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:57 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x401f000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:57 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4d01000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:57 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6400000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:57 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xe030000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:57 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7c15000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:57 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 27) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 822.139030] do_splice_to+0x10e/0x160 [ 822.139050] splice_direct_to_actor+0x2b9/0x8d0 [ 822.139070] ? generic_pipe_buf_nosteal+0x10/0x10 [ 822.139090] ? do_splice_to+0x160/0x160 [ 822.139114] do_splice_direct+0x1a7/0x270 [ 822.139132] ? splice_direct_to_actor+0x8d0/0x8d0 [ 822.139152] ? security_file_permission+0x1c0/0x220 [ 822.139173] do_sendfile+0x550/0xc30 [ 822.139198] ? do_compat_pwritev64+0x1b0/0x1b0 [ 822.139215] ? vfs_write+0x393/0x540 [ 822.139235] __se_sys_sendfile64+0x147/0x160 [ 822.139250] ? __se_sys_sendfile+0x180/0x180 [ 822.139267] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 822.139284] ? trace_hardirqs_off_caller+0x6e/0x210 [ 822.139299] ? do_syscall_64+0x21/0x620 [ 822.139315] do_syscall_64+0xf9/0x620 [ 822.139333] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 822.139344] RIP: 0033:0x7f337636e0d9 [ 822.139358] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 02:10:57 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9a02000000000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 822.139366] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 822.139379] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 822.139387] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 822.139395] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 822.139404] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 822.139412] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 [ 822.317203] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 822.352803] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 822.393865] audit: type=1804 audit(1670206257.431:851): pid=1438 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/408/bus" dev="sda1" ino=14084 res=1 [ 822.428256] FAULT_INJECTION: forcing a failure. [ 822.428256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 822.429797] audit: type=1804 audit(1670206257.461:852): pid=1439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4051628315/syzkaller.p6RxGQ/3/bus" dev="sda1" ino=14369 res=1 [ 822.444049] CPU: 0 PID: 1438 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 822.472240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 822.481597] Call Trace: [ 822.484192] dump_stack+0x1fc/0x2ef [ 822.487842] should_fail.cold+0xa/0xf [ 822.491734] ? lock_acquire+0x170/0x3c0 [ 822.495698] ? setup_fault_attr+0x200/0x200 [ 822.500047] __alloc_pages_nodemask+0x239/0x2890 [ 822.504794] ? __lock_acquire+0x6de/0x3ff0 [ 822.509013] ? __lock_acquire+0x6de/0x3ff0 [ 822.513262] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 822.518087] ? mark_held_locks+0xf0/0xf0 [ 822.522134] ? __lock_acquire+0x6de/0x3ff0 [ 822.526352] ? __do_page_cache_readahead+0x39f/0x6c0 [ 822.531442] alloc_pages_current+0x193/0x2a0 [ 822.535843] __page_cache_alloc+0x76/0x90 [ 822.539982] __do_page_cache_readahead+0x1a1/0x6c0 [ 822.544912] ? read_pages.isra.0+0x5d0/0x5d0 [ 822.549324] ? page_cache_sync_readahead+0x1c5/0x520 [ 822.554415] ondemand_readahead.isra.0+0x575/0xd40 [ 822.559333] page_cache_sync_readahead+0x275/0x520 [ 822.564248] generic_file_read_iter+0x1497/0x2b60 [ 822.569085] ext4_file_read_iter+0x17b/0x3a0 [ 822.573730] generic_file_splice_read+0x44a/0x6d0 [ 822.578561] ? add_to_pipe+0x360/0x360 [ 822.582437] ? security_file_permission+0x1c0/0x220 [ 822.587437] ? add_to_pipe+0x360/0x360 [ 822.591307] do_splice_to+0x10e/0x160 [ 822.595092] splice_direct_to_actor+0x2b9/0x8d0 [ 822.599749] ? generic_pipe_buf_nosteal+0x10/0x10 [ 822.604669] ? do_splice_to+0x160/0x160 [ 822.608640] do_splice_direct+0x1a7/0x270 [ 822.612773] ? splice_direct_to_actor+0x8d0/0x8d0 [ 822.617606] ? security_file_permission+0x1c0/0x220 [ 822.622608] do_sendfile+0x550/0xc30 [ 822.626311] ? do_compat_pwritev64+0x1b0/0x1b0 [ 822.630878] ? vfs_write+0x393/0x540 [ 822.634576] __se_sys_sendfile64+0x147/0x160 [ 822.638988] ? __se_sys_sendfile+0x180/0x180 [ 822.643394] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 822.648850] ? trace_hardirqs_off_caller+0x6e/0x210 [ 822.653849] ? do_syscall_64+0x21/0x620 [ 822.657806] do_syscall_64+0xf9/0x620 [ 822.661590] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 822.666761] RIP: 0033:0x7f337636e0d9 [ 822.670470] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 822.689358] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 822.697490] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 822.704742] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 822.711994] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 822.719250] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 822.726503] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:57 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x13}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:57 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xf000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:57 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfeffffff00000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:57 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) (async, rerun: 64) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) open(&(0x7f0000000000)='./bus\x00', 0x101000, 0x0) listen(r2, 0x0) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (async) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:57 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 28) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:57 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 822.856239] Bluetooth: hci3: command 0x0419 tx timeout 02:10:58 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:58 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xffffff7f00000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 822.912103] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:10:58 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xffffffff00000000, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 822.969903] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 822.982501] FAULT_INJECTION: forcing a failure. [ 822.982501] name fail_page_alloc, interval 1, probability 0, space 0, times 0 02:10:58 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:58 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x11000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:58 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x12000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 823.053014] CPU: 1 PID: 1467 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 823.060847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 823.070206] Call Trace: [ 823.072807] dump_stack+0x1fc/0x2ef [ 823.076446] should_fail.cold+0xa/0xf [ 823.080255] ? lock_acquire+0x170/0x3c0 [ 823.084239] ? setup_fault_attr+0x200/0x200 [ 823.088584] __alloc_pages_nodemask+0x239/0x2890 [ 823.093354] ? __lock_acquire+0x6de/0x3ff0 [ 823.097607] ? __lock_acquire+0x6de/0x3ff0 [ 823.101862] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 823.106715] ? mark_held_locks+0xf0/0xf0 [ 823.110793] ? __lock_acquire+0x6de/0x3ff0 [ 823.115053] ? __do_page_cache_readahead+0x39f/0x6c0 [ 823.120185] alloc_pages_current+0x193/0x2a0 [ 823.124694] __page_cache_alloc+0x76/0x90 [ 823.128858] __do_page_cache_readahead+0x1a1/0x6c0 [ 823.133807] ? read_pages.isra.0+0x5d0/0x5d0 [ 823.138221] ? page_cache_sync_readahead+0x1c5/0x520 [ 823.143336] ondemand_readahead.isra.0+0x575/0xd40 [ 823.148284] page_cache_sync_readahead+0x275/0x520 [ 823.153225] generic_file_read_iter+0x1497/0x2b60 [ 823.158070] ext4_file_read_iter+0x17b/0x3a0 [ 823.162468] generic_file_splice_read+0x44a/0x6d0 [ 823.167308] ? add_to_pipe+0x360/0x360 [ 823.171207] ? security_file_permission+0x1c0/0x220 [ 823.176232] ? add_to_pipe+0x360/0x360 [ 823.180113] do_splice_to+0x10e/0x160 [ 823.183897] splice_direct_to_actor+0x2b9/0x8d0 [ 823.188572] ? generic_pipe_buf_nosteal+0x10/0x10 [ 823.193415] ? do_splice_to+0x160/0x160 [ 823.197400] do_splice_direct+0x1a7/0x270 [ 823.201563] ? splice_direct_to_actor+0x8d0/0x8d0 [ 823.206408] ? security_file_permission+0x1c0/0x220 [ 823.211432] do_sendfile+0x550/0xc30 [ 823.215143] ? do_compat_pwritev64+0x1b0/0x1b0 [ 823.219709] ? vfs_write+0x393/0x540 [ 823.223406] __se_sys_sendfile64+0x147/0x160 [ 823.227811] ? __se_sys_sendfile+0x180/0x180 [ 823.232222] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 823.237580] ? trace_hardirqs_off_caller+0x6e/0x210 [ 823.242583] ? do_syscall_64+0x21/0x620 [ 823.246553] do_syscall_64+0xf9/0x620 [ 823.250369] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 823.255550] RIP: 0033:0x7f337636e0d9 [ 823.259302] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 823.278210] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 823.285921] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 823.293184] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 823.300457] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 823.307728] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 823.315000] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:58 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x14}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:58 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1d000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:58 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:58 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) (async) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) open(&(0x7f0000000000)='./bus\x00', 0x101000, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (async) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:58 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 29) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:58 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:58 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1f000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 823.445266] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 823.464509] FAULT_INJECTION: forcing a failure. [ 823.464509] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 823.478353] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 823.510413] CPU: 1 PID: 1512 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 823.518243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 823.527591] Call Trace: [ 823.530178] dump_stack+0x1fc/0x2ef [ 823.533799] should_fail.cold+0xa/0xf [ 823.537593] ? lock_acquire+0x170/0x3c0 [ 823.541556] ? setup_fault_attr+0x200/0x200 [ 823.545877] __alloc_pages_nodemask+0x239/0x2890 [ 823.550626] ? __lock_acquire+0x6de/0x3ff0 [ 823.554868] ? __lock_acquire+0x6de/0x3ff0 [ 823.559098] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 823.563949] ? mark_held_locks+0xf0/0xf0 [ 823.568009] ? __lock_acquire+0x6de/0x3ff0 [ 823.572236] ? __do_page_cache_readahead+0x39f/0x6c0 [ 823.577338] alloc_pages_current+0x193/0x2a0 [ 823.581740] __page_cache_alloc+0x76/0x90 [ 823.585885] __do_page_cache_readahead+0x1a1/0x6c0 [ 823.590809] ? read_pages.isra.0+0x5d0/0x5d0 [ 823.595296] ? page_cache_sync_readahead+0x1c5/0x520 [ 823.600390] ondemand_readahead.isra.0+0x575/0xd40 [ 823.605310] page_cache_sync_readahead+0x275/0x520 [ 823.610233] generic_file_read_iter+0x1497/0x2b60 [ 823.615076] ext4_file_read_iter+0x17b/0x3a0 [ 823.619479] generic_file_splice_read+0x44a/0x6d0 [ 823.624320] ? add_to_pipe+0x360/0x360 [ 823.628203] ? security_file_permission+0x1c0/0x220 [ 823.633213] ? add_to_pipe+0x360/0x360 [ 823.637091] do_splice_to+0x10e/0x160 [ 823.640885] splice_direct_to_actor+0x2b9/0x8d0 [ 823.645548] ? generic_pipe_buf_nosteal+0x10/0x10 [ 823.650382] ? do_splice_to+0x160/0x160 [ 823.654353] do_splice_direct+0x1a7/0x270 [ 823.658492] ? splice_direct_to_actor+0x8d0/0x8d0 [ 823.663330] ? security_file_permission+0x1c0/0x220 [ 823.668348] do_sendfile+0x550/0xc30 [ 823.672057] ? do_compat_pwritev64+0x1b0/0x1b0 [ 823.676631] ? vfs_write+0x393/0x540 [ 823.680344] __se_sys_sendfile64+0x147/0x160 [ 823.684741] ? __se_sys_sendfile+0x180/0x180 [ 823.689145] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 823.694502] ? trace_hardirqs_off_caller+0x6e/0x210 [ 823.699683] ? do_syscall_64+0x21/0x620 [ 823.703648] do_syscall_64+0xf9/0x620 [ 823.707440] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 823.712617] RIP: 0033:0x7f337636e0d9 [ 823.716318] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 823.735297] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 823.742993] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 823.750248] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 823.757510] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 823.764766] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 823.772025] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:58 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x20000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:58 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 30) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:58 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb000200}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:59 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x40000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:59 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x7, 0x0, 0x1, 0x6, 0x1f, 0xe8ac}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 823.939371] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 823.948474] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 823.973665] FAULT_INJECTION: forcing a failure. [ 823.973665] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 823.995740] CPU: 1 PID: 1542 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 824.003576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 824.012938] Call Trace: [ 824.015542] dump_stack+0x1fc/0x2ef [ 824.019187] should_fail.cold+0xa/0xf [ 824.022999] ? lock_acquire+0x170/0x3c0 [ 824.026984] ? setup_fault_attr+0x200/0x200 [ 824.031329] __alloc_pages_nodemask+0x239/0x2890 [ 824.036103] ? __lock_acquire+0x6de/0x3ff0 [ 824.040361] ? __lock_acquire+0x6de/0x3ff0 [ 824.044611] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 824.049470] ? mark_held_locks+0xf0/0xf0 [ 824.053557] ? __lock_acquire+0x6de/0x3ff0 [ 824.057812] ? __do_page_cache_readahead+0x39f/0x6c0 [ 824.062944] alloc_pages_current+0x193/0x2a0 [ 824.067374] __page_cache_alloc+0x76/0x90 [ 824.071528] __do_page_cache_readahead+0x1a1/0x6c0 [ 824.076479] ? read_pages.isra.0+0x5d0/0x5d0 [ 824.080894] ? page_cache_sync_readahead+0x1c5/0x520 [ 824.086014] ondemand_readahead.isra.0+0x575/0xd40 [ 824.090954] page_cache_sync_readahead+0x275/0x520 [ 824.095900] generic_file_read_iter+0x1497/0x2b60 [ 824.100751] ext4_file_read_iter+0x17b/0x3a0 [ 824.105145] generic_file_splice_read+0x44a/0x6d0 [ 824.109975] ? add_to_pipe+0x360/0x360 [ 824.113870] ? security_file_permission+0x1c0/0x220 [ 824.118877] ? add_to_pipe+0x360/0x360 [ 824.122763] do_splice_to+0x10e/0x160 [ 824.126562] splice_direct_to_actor+0x2b9/0x8d0 [ 824.131217] ? generic_pipe_buf_nosteal+0x10/0x10 [ 824.136044] ? do_splice_to+0x160/0x160 [ 824.140009] do_splice_direct+0x1a7/0x270 [ 824.144142] ? splice_direct_to_actor+0x8d0/0x8d0 [ 824.148970] ? security_file_permission+0x1c0/0x220 [ 824.153985] do_sendfile+0x550/0xc30 [ 824.157698] ? do_compat_pwritev64+0x1b0/0x1b0 [ 824.162262] ? vfs_write+0x393/0x540 [ 824.165963] __se_sys_sendfile64+0x147/0x160 [ 824.170356] ? __se_sys_sendfile+0x180/0x180 [ 824.174751] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 824.180099] ? trace_hardirqs_off_caller+0x6e/0x210 [ 824.185099] ? do_syscall_64+0x21/0x620 [ 824.189056] do_syscall_64+0xf9/0x620 [ 824.192845] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 824.198025] RIP: 0033:0x7f337636e0d9 [ 824.201721] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 824.220605] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 824.228300] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 824.235557] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 02:10:59 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x15}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:59 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xc000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:59 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:10:59 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x401f0000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 824.242812] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 824.250064] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 824.257318] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:10:59 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 31) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:10:59 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x7, 0x0, 0x1, 0x6, 0x1f, 0xe8ac}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) (async) ftruncate(r0, 0x2007ffb) (async) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x7, 0x0, 0x1, 0x6, 0x1f, 0xe8ac}, 0x20) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) (async) sendfile(r4, r1, 0x0, 0x800100020046) (async) creat(&(0x7f0000000340)='./bus\x00', 0x0) (async) 02:10:59 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xc030000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:10:59 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4d010000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 824.386303] FAULT_INJECTION: forcing a failure. [ 824.386303] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 824.422393] CPU: 1 PID: 1569 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 02:10:59 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 824.430239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 824.439598] Call Trace: [ 824.442202] dump_stack+0x1fc/0x2ef [ 824.445842] should_fail.cold+0xa/0xf [ 824.449663] ? lock_acquire+0x170/0x3c0 [ 824.453646] ? setup_fault_attr+0x200/0x200 [ 824.457994] __alloc_pages_nodemask+0x239/0x2890 [ 824.462768] ? __lock_acquire+0x6de/0x3ff0 [ 824.467021] ? __lock_acquire+0x6de/0x3ff0 [ 824.471276] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 824.476142] ? mark_held_locks+0xf0/0xf0 [ 824.480317] ? __lock_acquire+0x6de/0x3ff0 02:10:59 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7c150000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 824.484579] ? __do_page_cache_readahead+0x39f/0x6c0 [ 824.489706] alloc_pages_current+0x193/0x2a0 [ 824.494136] __page_cache_alloc+0x76/0x90 [ 824.498315] __do_page_cache_readahead+0x1a1/0x6c0 [ 824.503265] ? read_pages.isra.0+0x5d0/0x5d0 [ 824.507693] ? page_cache_sync_readahead+0x1c5/0x520 [ 824.512818] ondemand_readahead.isra.0+0x575/0xd40 [ 824.517764] page_cache_sync_readahead+0x275/0x520 [ 824.522709] generic_file_read_iter+0x1497/0x2b60 [ 824.527577] ext4_file_read_iter+0x17b/0x3a0 [ 824.532004] generic_file_splice_read+0x44a/0x6d0 [ 824.536861] ? add_to_pipe+0x360/0x360 [ 824.540860] ? security_file_permission+0x1c0/0x220 [ 824.545891] ? add_to_pipe+0x360/0x360 [ 824.549793] do_splice_to+0x10e/0x160 [ 824.553609] splice_direct_to_actor+0x2b9/0x8d0 [ 824.558302] ? generic_pipe_buf_nosteal+0x10/0x10 [ 824.563160] ? do_splice_to+0x160/0x160 [ 824.567154] do_splice_direct+0x1a7/0x270 [ 824.571329] ? splice_direct_to_actor+0x8d0/0x8d0 [ 824.576193] ? security_file_permission+0x1c0/0x220 [ 824.581231] do_sendfile+0x550/0xc30 02:10:59 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9a020000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:10:59 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 824.584965] ? do_compat_pwritev64+0x1b0/0x1b0 [ 824.589561] ? vfs_write+0x393/0x540 [ 824.593296] __se_sys_sendfile64+0x147/0x160 [ 824.597718] ? __se_sys_sendfile+0x180/0x180 [ 824.602142] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 824.607527] ? trace_hardirqs_off_caller+0x6e/0x210 [ 824.612553] ? do_syscall_64+0x21/0x620 [ 824.616538] do_syscall_64+0xf9/0x620 [ 824.620348] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 824.625540] RIP: 0033:0x7f337636e0d9 [ 824.629259] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 824.648169] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 824.655888] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 824.663169] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 824.670448] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 824.677741] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 824.685019] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:11:00 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x64}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:11:00 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfeffffff}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:11:00 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) (async) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0x0) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x7, 0x0, 0x1, 0x6, 0x1f, 0xe8ac}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) (async) sendfile(r4, r1, 0x0, 0x800100020046) (async) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:11:00 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 32) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:11:00 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:11:00 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:11:00 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xffffff7f}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:11:00 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_setlink={0x7c, 0x13, 0x100, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x48086, 0x4000}, [@IFLA_MAP={0x24, 0xe, {0x1, 0xfffffffffffffffb, 0x0, 0x8, 0x4d, 0x80}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3e25}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ce18}, @IFLA_EVENT={0x8, 0x2c, 0x9}, @IFLA_WEIGHT={0x8, 0xf, 0x1f}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3b83}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x374e}]}, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x8004) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) r5 = epoll_create1(0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) 02:11:00 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x11000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 825.376375] FAULT_INJECTION: forcing a failure. [ 825.376375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 825.416392] CPU: 0 PID: 1651 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 825.424226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 825.433674] Call Trace: [ 825.436284] dump_stack+0x1fc/0x2ef [ 825.439927] should_fail.cold+0xa/0xf [ 825.443743] ? lock_acquire+0x170/0x3c0 [ 825.447734] ? setup_fault_attr+0x200/0x200 [ 825.452082] __alloc_pages_nodemask+0x239/0x2890 [ 825.456860] ? __lock_acquire+0x6de/0x3ff0 [ 825.461138] ? __lock_acquire+0x6de/0x3ff0 [ 825.465399] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 825.470264] ? mark_held_locks+0xf0/0xf0 [ 825.474368] ? __lock_acquire+0x6de/0x3ff0 [ 825.478623] ? __do_page_cache_readahead+0x39f/0x6c0 [ 825.483749] alloc_pages_current+0x193/0x2a0 [ 825.488178] __page_cache_alloc+0x76/0x90 [ 825.492342] __do_page_cache_readahead+0x1a1/0x6c0 [ 825.497298] ? read_pages.isra.0+0x5d0/0x5d0 [ 825.501722] ? page_cache_sync_readahead+0x1c5/0x520 [ 825.506886] ondemand_readahead.isra.0+0x575/0xd40 [ 825.511835] page_cache_sync_readahead+0x275/0x520 [ 825.516777] generic_file_read_iter+0x1497/0x2b60 [ 825.521640] ext4_file_read_iter+0x17b/0x3a0 [ 825.526055] generic_file_splice_read+0x44a/0x6d0 [ 825.530901] ? add_to_pipe+0x360/0x360 [ 825.534791] ? security_file_permission+0x1c0/0x220 [ 825.539799] ? add_to_pipe+0x360/0x360 [ 825.543765] do_splice_to+0x10e/0x160 [ 825.547561] splice_direct_to_actor+0x2b9/0x8d0 [ 825.552227] ? generic_pipe_buf_nosteal+0x10/0x10 [ 825.557063] ? do_splice_to+0x160/0x160 [ 825.561037] do_splice_direct+0x1a7/0x270 [ 825.565178] ? splice_direct_to_actor+0x8d0/0x8d0 [ 825.570016] ? security_file_permission+0x1c0/0x220 [ 825.575115] do_sendfile+0x550/0xc30 [ 825.578825] ? do_compat_pwritev64+0x1b0/0x1b0 [ 825.583399] ? vfs_write+0x393/0x540 [ 825.587114] __se_sys_sendfile64+0x147/0x160 [ 825.591515] ? __se_sys_sendfile+0x180/0x180 [ 825.595915] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 825.601273] ? trace_hardirqs_off_caller+0x6e/0x210 [ 825.606282] ? do_syscall_64+0x21/0x620 [ 825.610249] do_syscall_64+0xf9/0x620 [ 825.614048] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 825.619228] RIP: 0033:0x7f337636e0d9 [ 825.622933] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 825.641821] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 825.649531] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 825.657136] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 825.664393] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 02:11:00 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfffffffe}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:11:00 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 33) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:11:00 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_setlink={0x7c, 0x13, 0x100, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x48086, 0x4000}, [@IFLA_MAP={0x24, 0xe, {0x1, 0xfffffffffffffffb, 0x0, 0x8, 0x4d, 0x80}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3e25}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ce18}, @IFLA_EVENT={0x8, 0x2c, 0x9}, @IFLA_WEIGHT={0x8, 0xf, 0x1f}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3b83}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x374e}]}, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x8004) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) r5 = epoll_create1(0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) (async) ftruncate(r0, 0x2007ffb) (async) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) getpid() (async) sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_setlink={0x7c, 0x13, 0x100, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x48086, 0x4000}, [@IFLA_MAP={0x24, 0xe, {0x1, 0xfffffffffffffffb, 0x0, 0x8, 0x4d, 0x80}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3e25}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ce18}, @IFLA_EVENT={0x8, 0x2c, 0x9}, @IFLA_WEIGHT={0x8, 0xf, 0x1f}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3b83}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x374e}]}, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x8004) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) (async) sendfile(r3, r1, 0x0, 0x800100020046) (async) creat(&(0x7f0000000340)='./bus\x00', 0x0) (async) epoll_create1(0x0) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) (async) [ 825.671738] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 825.678999] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 [ 825.813687] FAULT_INJECTION: forcing a failure. [ 825.813687] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 825.835085] CPU: 1 PID: 1681 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 825.842922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 825.852282] Call Trace: [ 825.854888] dump_stack+0x1fc/0x2ef [ 825.858557] should_fail.cold+0xa/0xf [ 825.862378] ? lock_acquire+0x170/0x3c0 [ 825.866371] ? setup_fault_attr+0x200/0x200 [ 825.870718] __alloc_pages_nodemask+0x239/0x2890 [ 825.875490] ? __lock_acquire+0x6de/0x3ff0 [ 825.879730] ? __lock_acquire+0x6de/0x3ff0 [ 825.883953] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 825.888784] ? mark_held_locks+0xf0/0xf0 [ 825.892833] ? __lock_acquire+0x6de/0x3ff0 [ 825.897056] ? __do_page_cache_readahead+0x39f/0x6c0 [ 825.902153] alloc_pages_current+0x193/0x2a0 [ 825.906579] __page_cache_alloc+0x76/0x90 [ 825.910717] __do_page_cache_readahead+0x1a1/0x6c0 [ 825.915639] ? read_pages.isra.0+0x5d0/0x5d0 [ 825.920033] ? page_cache_sync_readahead+0x1c5/0x520 [ 825.925124] ondemand_readahead.isra.0+0x575/0xd40 [ 825.930040] page_cache_sync_readahead+0x275/0x520 [ 825.934955] generic_file_read_iter+0x1497/0x2b60 [ 825.939789] ext4_file_read_iter+0x17b/0x3a0 [ 825.944239] generic_file_splice_read+0x44a/0x6d0 [ 825.949067] ? add_to_pipe+0x360/0x360 [ 825.952961] ? security_file_permission+0x1c0/0x220 [ 825.957974] ? add_to_pipe+0x360/0x360 [ 825.961855] do_splice_to+0x10e/0x160 [ 825.965642] splice_direct_to_actor+0x2b9/0x8d0 [ 825.970299] ? generic_pipe_buf_nosteal+0x10/0x10 [ 825.975136] ? do_splice_to+0x160/0x160 [ 825.979099] do_splice_direct+0x1a7/0x270 [ 825.983236] ? splice_direct_to_actor+0x8d0/0x8d0 [ 825.988174] ? security_file_permission+0x1c0/0x220 [ 825.993196] do_sendfile+0x550/0xc30 [ 825.996907] ? do_compat_pwritev64+0x1b0/0x1b0 [ 826.001485] ? vfs_write+0x393/0x540 [ 826.005192] __se_sys_sendfile64+0x147/0x160 [ 826.009586] ? __se_sys_sendfile+0x180/0x180 [ 826.013982] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 826.019336] ? trace_hardirqs_off_caller+0x6e/0x210 [ 826.024340] ? do_syscall_64+0x21/0x620 [ 826.028297] do_syscall_64+0xf9/0x620 [ 826.032085] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 826.037256] RIP: 0033:0x7f337636e0d9 [ 826.040952] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 826.059834] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 826.067530] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 826.074783] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 826.082046] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 826.089323] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 826.096606] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:11:01 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x14d}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:11:01 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x13000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:11:01 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb627f598c4}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:11:01 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x5, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:11:01 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 34) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:11:01 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_setlink={0x7c, 0x13, 0x100, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x48086, 0x4000}, [@IFLA_MAP={0x24, 0xe, {0x1, 0xfffffffffffffffb, 0x0, 0x8, 0x4d, 0x80}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3e25}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ce18}, @IFLA_EVENT={0x8, 0x2c, 0x9}, @IFLA_WEIGHT={0x8, 0xf, 0x1f}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3b83}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x374e}]}, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x8004) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) (async) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) (async) r5 = epoll_create1(0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) 02:11:01 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 826.240385] kauditd_printk_skb: 95 callbacks suppressed [ 826.240397] audit: type=1804 audit(1670206261.362:948): pid=1723 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/415/bus" dev="sda1" ino=14964 res=1 [ 826.304142] FAULT_INJECTION: forcing a failure. [ 826.304142] name fail_page_alloc, interval 1, probability 0, space 0, times 0 02:11:01 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:11:01 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 826.334134] audit: type=1804 audit(1670206261.372:949): pid=1727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4051628315/syzkaller.p6RxGQ/11/bus" dev="sda1" ino=14996 res=1 [ 826.346347] CPU: 1 PID: 1723 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 826.365740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 826.375097] Call Trace: [ 826.377702] dump_stack+0x1fc/0x2ef [ 826.381346] should_fail.cold+0xa/0xf [ 826.385162] ? lock_acquire+0x170/0x3c0 [ 826.389165] ? setup_fault_attr+0x200/0x200 [ 826.389567] audit: type=1804 audit(1670206261.442:950): pid=1727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir4051628315/syzkaller.p6RxGQ/11/bus" dev="sda1" ino=14996 res=1 [ 826.393513] __alloc_pages_nodemask+0x239/0x2890 [ 826.393535] ? __lock_acquire+0x6de/0x3ff0 [ 826.393555] ? __lock_acquire+0x6de/0x3ff0 [ 826.429908] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 826.434769] ? mark_held_locks+0xf0/0xf0 [ 826.438862] ? __lock_acquire+0x6de/0x3ff0 [ 826.443121] ? __do_page_cache_readahead+0x39f/0x6c0 [ 826.448247] alloc_pages_current+0x193/0x2a0 02:11:01 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 826.452675] __page_cache_alloc+0x76/0x90 [ 826.456851] __do_page_cache_readahead+0x1a1/0x6c0 [ 826.461809] ? read_pages.isra.0+0x5d0/0x5d0 [ 826.466238] ? page_cache_sync_readahead+0x1c5/0x520 [ 826.471371] ondemand_readahead.isra.0+0x575/0xd40 [ 826.475651] audit: type=1804 audit(1670206261.472:951): pid=1747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4051628315/syzkaller.p6RxGQ/12/bus" dev="sda1" ino=14660 res=1 [ 826.476401] page_cache_sync_readahead+0x275/0x520 [ 826.476421] generic_file_read_iter+0x1497/0x2b60 [ 826.476454] ext4_file_read_iter+0x17b/0x3a0 [ 826.476474] generic_file_splice_read+0x44a/0x6d0 [ 826.519131] ? add_to_pipe+0x360/0x360 [ 826.523022] ? security_file_permission+0x1c0/0x220 [ 826.528031] ? add_to_pipe+0x360/0x360 [ 826.531911] do_splice_to+0x10e/0x160 [ 826.535704] splice_direct_to_actor+0x2b9/0x8d0 [ 826.540367] ? generic_pipe_buf_nosteal+0x10/0x10 [ 826.545202] ? do_splice_to+0x160/0x160 [ 826.549172] do_splice_direct+0x1a7/0x270 [ 826.553313] ? splice_direct_to_actor+0x8d0/0x8d0 [ 826.558153] ? security_file_permission+0x1c0/0x220 [ 826.563163] do_sendfile+0x550/0xc30 [ 826.566875] ? do_compat_pwritev64+0x1b0/0x1b0 [ 826.571450] ? vfs_write+0x393/0x540 [ 826.575155] __se_sys_sendfile64+0x147/0x160 [ 826.579553] ? __se_sys_sendfile+0x180/0x180 [ 826.583953] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 826.589397] ? trace_hardirqs_off_caller+0x6e/0x210 [ 826.594399] ? do_syscall_64+0x21/0x620 [ 826.598363] do_syscall_64+0xf9/0x620 [ 826.602154] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 826.607334] RIP: 0033:0x7f337636e0d9 [ 826.611035] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 826.629922] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 826.637618] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 826.644874] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 02:11:01 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x14000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 826.652134] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 826.659391] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 826.666647] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:11:01 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 826.741469] audit: type=1804 audit(1670206261.832:952): pid=1748 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/415/bus" dev="sda1" ino=14964 res=1 02:11:01 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x29a}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:11:01 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 35) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:11:01 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x40000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:11:01 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x15000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:11:02 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x80000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 826.845548] audit: type=1804 audit(1670206261.892:953): pid=1754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir4051628315/syzkaller.p6RxGQ/12/bus" dev="sda1" ino=14660 res=1 [ 826.901954] net_ratelimit: 10 callbacks suppressed [ 826.901963] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 826.928304] audit: type=1804 audit(1670206262.022:954): pid=1772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/416/bus" dev="sda1" ino=14661 res=1 02:11:02 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x803e0000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 826.962319] FAULT_INJECTION: forcing a failure. [ 826.962319] name failslab, interval 1, probability 0, space 0, times 0 [ 826.976303] CPU: 1 PID: 1772 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 826.984134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 826.993494] Call Trace: [ 826.996095] dump_stack+0x1fc/0x2ef [ 826.999737] should_fail.cold+0xa/0xf [ 827.003554] ? setup_fault_attr+0x200/0x200 [ 827.007893] ? __lock_acquire+0x6de/0x3ff0 02:11:02 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd0070000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 827.012148] __should_failslab+0x115/0x180 [ 827.016526] should_failslab+0x5/0x10 [ 827.016629] audit: type=1804 audit(1670206262.102:955): pid=1787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/416/bus" dev="sda1" ino=14661 res=1 [ 827.020332] __kmalloc+0x2ab/0x3c0 [ 827.047085] ? ext4_find_extent+0x9bb/0xc70 [ 827.051424] ext4_find_extent+0x9bb/0xc70 [ 827.055594] ext4_ext_map_blocks+0x1c0/0x7390 [ 827.060112] ? __lock_acquire+0x6de/0x3ff0 [ 827.064364] ? __lock_acquire+0x6de/0x3ff0 [ 827.068611] ? mark_held_locks+0xf0/0xf0 [ 827.072682] ? mark_held_locks+0xf0/0xf0 [ 827.076754] ? mem_cgroup_oom_trylock+0x220/0x220 [ 827.081609] ? ext4_find_delalloc_cluster+0x1f0/0x1f0 [ 827.086810] ? mark_held_locks+0xf0/0xf0 [ 827.090865] ? count_shadow_nodes+0x260/0x260 [ 827.095346] ? __radix_tree_replace+0x2b3/0x300 [ 827.100001] ? ext4_es_lookup_extent+0x375/0xb60 [ 827.104743] ? lock_downgrade+0x720/0x720 [ 827.108881] ? lock_acquire+0x170/0x3c0 [ 827.112840] ? check_preemption_disabled+0x41/0x280 [ 827.117844] ? lock_acquire+0x170/0x3c0 [ 827.121805] ? ext4_map_blocks+0x33e/0x1a50 [ 827.126116] ext4_map_blocks+0xd88/0x1a50 [ 827.130256] ? __lru_cache_add+0x1e3/0x2c0 [ 827.134575] ? ext4_issue_zeroout+0x160/0x160 [ 827.139076] ? add_to_page_cache_lru+0x259/0x680 [ 827.143827] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 827.149816] ext4_mpage_readpages+0xc76/0x1aa0 [ 827.154383] ? lock_acquire+0x170/0x3c0 [ 827.158351] ? mpage_end_io+0x520/0x520 [ 827.162323] ? __lock_acquire+0x6de/0x3ff0 [ 827.166556] ext4_readpages+0xd5/0x110 [ 827.170428] ? ext4_bmap+0x420/0x420 [ 827.174129] read_pages.isra.0+0xf6/0x5d0 [ 827.178267] ? read_cache_pages+0x750/0x750 [ 827.182576] ? alloc_pages_current+0x19b/0x2a0 [ 827.187143] __do_page_cache_readahead+0x5c6/0x6c0 [ 827.192078] ? read_pages.isra.0+0x5d0/0x5d0 [ 827.196471] ? page_cache_sync_readahead+0x1c5/0x520 [ 827.201651] ondemand_readahead.isra.0+0x575/0xd40 [ 827.206571] page_cache_sync_readahead+0x275/0x520 [ 827.211492] generic_file_read_iter+0x1497/0x2b60 [ 827.216328] ext4_file_read_iter+0x17b/0x3a0 [ 827.220754] generic_file_splice_read+0x44a/0x6d0 [ 827.225583] ? add_to_pipe+0x360/0x360 [ 827.229461] ? security_file_permission+0x1c0/0x220 [ 827.234464] ? add_to_pipe+0x360/0x360 [ 827.238337] do_splice_to+0x10e/0x160 [ 827.242128] splice_direct_to_actor+0x2b9/0x8d0 [ 827.246785] ? generic_pipe_buf_nosteal+0x10/0x10 [ 827.251615] ? do_splice_to+0x160/0x160 [ 827.255576] do_splice_direct+0x1a7/0x270 [ 827.259707] ? splice_direct_to_actor+0x8d0/0x8d0 [ 827.264542] ? security_file_permission+0x1c0/0x220 [ 827.269546] do_sendfile+0x550/0xc30 [ 827.273277] ? do_compat_pwritev64+0x1b0/0x1b0 [ 827.277859] ? vfs_write+0x393/0x540 [ 827.281559] __se_sys_sendfile64+0x147/0x160 [ 827.285949] ? __se_sys_sendfile+0x180/0x180 [ 827.290351] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 827.295707] ? trace_hardirqs_off_caller+0x6e/0x210 [ 827.300711] ? do_syscall_64+0x21/0x620 [ 827.304676] do_syscall_64+0xf9/0x620 [ 827.308467] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 827.313650] RIP: 0033:0x7f337636e0d9 [ 827.317357] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 827.336241] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 827.343934] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 827.351192] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 827.358447] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 827.365705] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 827.372964] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:11:02 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (async) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:11:02 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:11:02 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x20000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:11:02 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 36) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 827.507394] audit: type=1804 audit(1670206262.632:956): pid=1804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4051628315/syzkaller.p6RxGQ/13/bus" dev="sda1" ino=14532 res=1 [ 827.536060] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 827.552458] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 827.568915] FAULT_INJECTION: forcing a failure. [ 827.568915] name failslab, interval 1, probability 0, space 0, times 0 [ 827.580653] CPU: 0 PID: 1805 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 827.588458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 827.597814] Call Trace: [ 827.600420] dump_stack+0x1fc/0x2ef [ 827.604050] should_fail.cold+0xa/0xf [ 827.607844] ? setup_fault_attr+0x200/0x200 [ 827.612157] ? __es_tree_search.isra.0+0x1af/0x210 [ 827.617079] __should_failslab+0x115/0x180 [ 827.621308] should_failslab+0x5/0x10 [ 827.625096] kmem_cache_alloc+0x3f/0x370 [ 827.629148] __es_insert_extent+0x39b/0x13b0 [ 827.633550] ? lock_acquire+0x170/0x3c0 [ 827.637512] ? ext4_es_insert_extent+0x17e/0x5e0 [ 827.642263] ext4_es_insert_extent+0x22e/0x5e0 [ 827.646840] ? lock_downgrade+0x720/0x720 [ 827.651077] ? ext4_es_find_delayed_extent_range+0x9f0/0x9f0 [ 827.656878] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 827.661887] ? ext4_es_find_delayed_extent_range+0x7d9/0x9f0 [ 827.667676] ext4_ext_map_blocks+0x2129/0x7390 [ 827.672336] ? __lock_acquire+0x6de/0x3ff0 [ 827.676581] ? __lock_acquire+0x6de/0x3ff0 [ 827.680850] ? mark_held_locks+0xf0/0xf0 [ 827.684908] ? mark_held_locks+0xf0/0xf0 [ 827.688960] ? mem_cgroup_oom_trylock+0x220/0x220 [ 827.693798] ? ext4_find_delalloc_cluster+0x1f0/0x1f0 [ 827.698980] ? mark_held_locks+0xf0/0xf0 [ 827.703036] ? count_shadow_nodes+0x260/0x260 [ 827.707521] ? __radix_tree_replace+0x2b3/0x300 [ 827.712184] ? ext4_es_lookup_extent+0x375/0xb60 [ 827.716937] ? check_preemption_disabled+0x41/0x280 [ 827.721948] ? lock_acquire+0x170/0x3c0 [ 827.725914] ? ext4_map_blocks+0x33e/0x1a50 [ 827.730231] ext4_map_blocks+0xd88/0x1a50 [ 827.734381] ? __lru_cache_add+0x1e3/0x2c0 [ 827.738606] ? ext4_issue_zeroout+0x160/0x160 [ 827.743094] ? add_to_page_cache_lru+0x259/0x680 [ 827.747852] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 827.753730] ext4_mpage_readpages+0xc76/0x1aa0 [ 827.758305] ? lock_acquire+0x170/0x3c0 [ 827.762279] ? mpage_end_io+0x520/0x520 [ 827.766251] ? __lock_acquire+0x6de/0x3ff0 [ 827.770499] ext4_readpages+0xd5/0x110 [ 827.774375] ? ext4_bmap+0x420/0x420 [ 827.778082] read_pages.isra.0+0xf6/0x5d0 [ 827.782230] ? read_cache_pages+0x750/0x750 [ 827.786549] ? alloc_pages_current+0x19b/0x2a0 [ 827.791215] __do_page_cache_readahead+0x5c6/0x6c0 [ 827.796144] ? read_pages.isra.0+0x5d0/0x5d0 [ 827.800542] ? page_cache_sync_readahead+0x1c5/0x520 [ 827.805641] ondemand_readahead.isra.0+0x575/0xd40 [ 827.810567] page_cache_sync_readahead+0x275/0x520 [ 827.815489] generic_file_read_iter+0x1497/0x2b60 [ 827.820334] ext4_file_read_iter+0x17b/0x3a0 [ 827.824742] generic_file_splice_read+0x44a/0x6d0 [ 827.829578] ? add_to_pipe+0x360/0x360 [ 827.833465] ? security_file_permission+0x1c0/0x220 [ 827.838488] ? add_to_pipe+0x360/0x360 [ 827.842369] do_splice_to+0x10e/0x160 [ 827.846164] splice_direct_to_actor+0x2b9/0x8d0 [ 827.850850] ? generic_pipe_buf_nosteal+0x10/0x10 [ 827.855686] ? do_splice_to+0x160/0x160 [ 827.859663] do_splice_direct+0x1a7/0x270 [ 827.863811] ? splice_direct_to_actor+0x8d0/0x8d0 [ 827.868651] ? security_file_permission+0x1c0/0x220 [ 827.873667] do_sendfile+0x550/0xc30 [ 827.877382] ? do_compat_pwritev64+0x1b0/0x1b0 [ 827.881958] ? vfs_write+0x393/0x540 [ 827.885671] __se_sys_sendfile64+0x147/0x160 [ 827.890075] ? __se_sys_sendfile+0x180/0x180 [ 827.894476] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 827.899831] ? trace_hardirqs_off_caller+0x6e/0x210 [ 827.904924] ? do_syscall_64+0x21/0x620 [ 827.908889] do_syscall_64+0xf9/0x620 [ 827.912684] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 827.917863] RIP: 0033:0x7f337636e0d9 [ 827.921567] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 827.940456] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 827.948153] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 827.955412] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 827.962672] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 827.969927] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 827.977192] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:11:03 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:11:03 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2f6}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:11:03 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x200000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:11:03 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x40000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 828.004621] audit: type=1804 audit(1670206262.652:957): pid=1805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226294778/syzkaller.Lt62xQ/417/bus" dev="sda1" ino=14549 res=1 02:11:03 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) (async, rerun: 32) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:11:03 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 37) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:11:03 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x300000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:11:03 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x401f0000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:11:03 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x400000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:11:03 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x500000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 828.265195] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 828.284501] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:11:03 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x454b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, '\x00', '\x00', "36578110"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:11:03 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x600000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 828.321368] FAULT_INJECTION: forcing a failure. [ 828.321368] name failslab, interval 1, probability 0, space 0, times 0 [ 828.333112] CPU: 1 PID: 1846 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 828.340921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 828.350284] Call Trace: [ 828.352887] dump_stack+0x1fc/0x2ef [ 828.356534] should_fail.cold+0xa/0xf [ 828.360349] ? setup_fault_attr+0x200/0x200 [ 828.364686] ? rcu_read_lock_sched_held+0x16c/0x1d0 02:11:03 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 828.369713] ? ext4_ext_map_blocks+0xa90/0x7390 [ 828.374412] __should_failslab+0x115/0x180 [ 828.378666] should_failslab+0x5/0x10 [ 828.382476] kmem_cache_alloc+0x3f/0x370 [ 828.386557] radix_tree_node_alloc.constprop.0+0x1e4/0x320 [ 828.392197] radix_tree_extend+0x191/0x4b0 [ 828.396445] ? mem_cgroup_oom_trylock+0x220/0x220 [ 828.401300] __radix_tree_create+0x448/0x540 [ 828.405765] page_cache_tree_insert+0xac/0x3f0 [ 828.410363] ? file_check_and_advance_wb_err+0x3a0/0x3a0 [ 828.415823] ? lock_acquire+0x170/0x3c0 [ 828.419812] ? __add_to_page_cache_locked+0x45e/0xb60 [ 828.425002] __add_to_page_cache_locked+0x46e/0xb60 [ 828.430008] ? page_cache_tree_insert+0x3f0/0x3f0 [ 828.434832] ? ext4_map_blocks+0x2e0/0x1a50 [ 828.439158] ? __lru_cache_add+0x1e3/0x2c0 [ 828.443409] add_to_page_cache_lru+0x16a/0x680 [ 828.448005] ? add_to_page_cache_locked+0x40/0x40 [ 828.452865] ext4_mpage_readpages+0x3e8/0x1aa0 [ 828.457458] ? lock_acquire+0x170/0x3c0 [ 828.461455] ? mpage_end_io+0x520/0x520 [ 828.465437] ? __lock_acquire+0x6de/0x3ff0 [ 828.469699] ext4_readpages+0xd5/0x110 [ 828.473594] ? ext4_bmap+0x420/0x420 [ 828.476692] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 828.477324] read_pages.isra.0+0xf6/0x5d0 [ 828.491918] ? read_cache_pages+0x750/0x750 [ 828.496260] ? alloc_pages_current+0x19b/0x2a0 [ 828.500867] __do_page_cache_readahead+0x5c6/0x6c0 [ 828.505815] ? read_pages.isra.0+0x5d0/0x5d0 [ 828.510231] ? page_cache_sync_readahead+0x1c5/0x520 [ 828.515354] ondemand_readahead.isra.0+0x575/0xd40 [ 828.520298] page_cache_sync_readahead+0x275/0x520 [ 828.525242] generic_file_read_iter+0x1497/0x2b60 [ 828.530113] ext4_file_read_iter+0x17b/0x3a0 [ 828.534542] generic_file_splice_read+0x44a/0x6d0 [ 828.539400] ? add_to_pipe+0x360/0x360 [ 828.543485] ? security_file_permission+0x1c0/0x220 [ 828.548505] ? add_to_pipe+0x360/0x360 [ 828.552378] do_splice_to+0x10e/0x160 [ 828.556173] splice_direct_to_actor+0x2b9/0x8d0 [ 828.560830] ? generic_pipe_buf_nosteal+0x10/0x10 [ 828.565672] ? do_splice_to+0x160/0x160 [ 828.569636] do_splice_direct+0x1a7/0x270 [ 828.573769] ? splice_direct_to_actor+0x8d0/0x8d0 [ 828.578601] ? security_file_permission+0x1c0/0x220 [ 828.583606] do_sendfile+0x550/0xc30 [ 828.587310] ? do_compat_pwritev64+0x1b0/0x1b0 [ 828.591882] ? vfs_write+0x393/0x540 [ 828.595590] __se_sys_sendfile64+0x147/0x160 [ 828.599990] ? __se_sys_sendfile+0x180/0x180 [ 828.604404] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 828.609753] ? trace_hardirqs_off_caller+0x6e/0x210 [ 828.614762] ? do_syscall_64+0x21/0x620 [ 828.618729] do_syscall_64+0xf9/0x620 [ 828.622607] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 828.627872] RIP: 0033:0x7f337636e0d9 [ 828.631576] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 828.650471] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 828.658163] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 828.665437] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 828.672690] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 828.679944] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 828.687195] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:11:03 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x300}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:11:03 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x700000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:11:03 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x454b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, '\x00', '\x00', "36578110"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) (async) ftruncate(r0, 0x2007ffb) (async) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) (async) ftruncate(r0, 0x454b) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, '\x00', '\x00', "36578110"}, 0x28) (async) sendfile(r3, r1, 0x0, 0x800100020046) (async) creat(&(0x7f0000000340)='./bus\x00', 0x0) (async) 02:11:03 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4d010000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:11:03 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 38) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:11:03 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:11:04 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x800000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 828.822697] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 828.858122] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:11:04 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x454b) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, '\x00', '\x00', "36578110"}, 0x28) (async) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 828.888438] FAULT_INJECTION: forcing a failure. [ 828.888438] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 828.939315] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 828.941016] CPU: 0 PID: 1903 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 828.957896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 828.967255] Call Trace: [ 828.969859] dump_stack+0x1fc/0x2ef [ 828.973505] should_fail.cold+0xa/0xf [ 828.977323] ? add_to_page_cache_lru+0x259/0x680 [ 828.982095] ? setup_fault_attr+0x200/0x200 [ 828.986427] ? crc32c_pcl_intel_update+0x1b9/0x320 [ 828.991376] __alloc_pages_nodemask+0x239/0x2890 [ 828.996152] ? ext4_inode_csum+0x676/0x920 [ 829.000562] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 829.005432] ? __brelse+0x84/0xa0 [ 829.008912] ? mark_held_locks+0xf0/0xf0 [ 829.012985] alloc_pages_current+0x193/0x2a0 [ 829.017408] skb_page_frag_refill+0x258/0x550 [ 829.021922] sk_page_frag_refill+0x4a/0x1d0 [ 829.026244] sk_alloc_sg+0x154/0x850 [ 829.029963] tls_sw_sendpage+0x4e1/0xd00 [ 829.034017] ? lock_downgrade+0x720/0x720 [ 829.038157] ? tls_sw_sendmsg+0x1210/0x1210 [ 829.042468] ? ktime_get_coarse_real_ts64+0x1c7/0x290 [ 829.047662] ? tls_sw_sendmsg+0x1210/0x1210 [ 829.051981] inet_sendpage+0x164/0x650 [ 829.055865] ? current_time+0x13c/0x1c0 [ 829.059840] ? inet_accept+0x770/0x770 [ 829.063711] sock_sendpage+0xdf/0x140 [ 829.067517] pipe_to_sendpage+0x268/0x330 [ 829.071688] ? sockfs_setattr+0x160/0x160 [ 829.075834] ? direct_splice_actor+0x160/0x160 [ 829.080411] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 829.085776] __splice_from_pipe+0x389/0x800 [ 829.090097] ? direct_splice_actor+0x160/0x160 [ 829.094668] generic_splice_sendpage+0xd4/0x140 [ 829.099336] ? __splice_from_pipe+0x800/0x800 [ 829.103834] ? security_file_permission+0x1c0/0x220 [ 829.108840] ? __splice_from_pipe+0x800/0x800 [ 829.113321] direct_splice_actor+0x115/0x160 [ 829.117732] splice_direct_to_actor+0x33f/0x8d0 [ 829.122398] ? generic_pipe_buf_nosteal+0x10/0x10 [ 829.127243] ? do_splice_to+0x160/0x160 [ 829.131306] do_splice_direct+0x1a7/0x270 [ 829.135444] ? splice_direct_to_actor+0x8d0/0x8d0 [ 829.140278] ? security_file_permission+0x1c0/0x220 [ 829.145378] do_sendfile+0x550/0xc30 [ 829.149085] ? do_compat_pwritev64+0x1b0/0x1b0 [ 829.153658] ? vfs_write+0x393/0x540 [ 829.157370] __se_sys_sendfile64+0x147/0x160 [ 829.161782] ? __se_sys_sendfile+0x180/0x180 [ 829.166190] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 829.171550] ? trace_hardirqs_off_caller+0x6e/0x210 [ 829.176562] ? do_syscall_64+0x21/0x620 [ 829.180564] do_syscall_64+0xf9/0x620 [ 829.184353] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 829.189535] RIP: 0033:0x7f337636e0d9 [ 829.193276] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 829.212165] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 829.219861] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 829.227131] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 02:11:04 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000180)=0x8) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x192) 02:11:04 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:11:04 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:11:04 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7c150000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 829.234420] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 829.241675] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 [ 829.248931] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 [ 829.384259] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:11:04 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa00000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:11:04 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) (fail_nth: 39) creat(&(0x7f0000000340)='./bus\x00', 0x0) 02:11:04 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9a020000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:11:04 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x500}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:11:04 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000180)=0x8) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x192) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) (async) ftruncate(r0, 0x2007ffb) (async) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000180)=0x8) (async) sendfile(r3, r1, 0x0, 0x800100020046) (async) creat(&(0x7f0000000340)='./bus\x00', 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x192) (async) 02:11:04 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb00000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 829.754951] FAULT_INJECTION: forcing a failure. [ 829.754951] name failslab, interval 1, probability 0, space 0, times 0 [ 829.779507] CPU: 0 PID: 1952 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 829.787339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 829.796698] Call Trace: [ 829.799300] dump_stack+0x1fc/0x2ef 02:11:04 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) (async) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000180)=0x8) (async) sendfile(r3, r1, 0x0, 0x800100020046) (async) creat(&(0x7f0000000340)='./bus\x00', 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x192) [ 829.802942] should_fail.cold+0xa/0xf [ 829.806756] ? setup_fault_attr+0x200/0x200 [ 829.811091] ? lock_acquire+0x170/0x3c0 [ 829.815087] __should_failslab+0x115/0x180 [ 829.819337] should_failslab+0x5/0x10 [ 829.823147] __kmalloc+0x2ab/0x3c0 [ 829.826699] ? tls_push_record+0xff/0x1370 [ 829.830949] tls_push_record+0xff/0x1370 [ 829.835024] ? sk_alloc_sg+0x5d8/0x850 [ 829.838934] tls_sw_sendpage+0x8c6/0xd00 [ 829.843022] ? tls_sw_sendmsg+0x1210/0x1210 [ 829.847368] ? ktime_get_coarse_real_ts64+0x1c7/0x290 02:11:05 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb00020000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 829.852687] ? tls_sw_sendmsg+0x1210/0x1210 [ 829.857036] inet_sendpage+0x164/0x650 [ 829.861029] ? current_time+0x13c/0x1c0 [ 829.865022] ? inet_accept+0x770/0x770 [ 829.868961] sock_sendpage+0xdf/0x140 [ 829.872781] pipe_to_sendpage+0x268/0x330 [ 829.876939] ? sockfs_setattr+0x160/0x160 [ 829.881103] ? direct_splice_actor+0x160/0x160 [ 829.885696] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 829.891165] __splice_from_pipe+0x389/0x800 [ 829.895508] ? direct_splice_actor+0x160/0x160 [ 829.900106] generic_splice_sendpage+0xd4/0x140 [ 829.904769] ? __splice_from_pipe+0x800/0x800 [ 829.909265] ? security_file_permission+0x1c0/0x220 [ 829.914275] ? __splice_from_pipe+0x800/0x800 [ 829.919197] direct_splice_actor+0x115/0x160 [ 829.923600] splice_direct_to_actor+0x33f/0x8d0 [ 829.928267] ? generic_pipe_buf_nosteal+0x10/0x10 [ 829.933103] ? do_splice_to+0x160/0x160 [ 829.937076] do_splice_direct+0x1a7/0x270 [ 829.941219] ? splice_direct_to_actor+0x8d0/0x8d0 [ 829.946057] ? security_file_permission+0x1c0/0x220 [ 829.951067] do_sendfile+0x550/0xc30 [ 829.954779] ? do_compat_pwritev64+0x1b0/0x1b0 [ 829.959373] ? vfs_write+0x393/0x540 [ 829.963104] __se_sys_sendfile64+0x147/0x160 [ 829.967515] ? __se_sys_sendfile+0x180/0x180 [ 829.971923] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 829.977286] ? trace_hardirqs_off_caller+0x6e/0x210 [ 829.982295] ? do_syscall_64+0x21/0x620 [ 829.986265] do_syscall_64+0xf9/0x620 [ 829.990058] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 829.995235] RIP: 0033:0x7f337636e0d9 [ 829.998941] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 830.017831] RSP: 002b:00007f33748e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 830.025543] RAX: ffffffffffffffda RBX: 00007f337648df80 RCX: 00007f337636e0d9 [ 830.032820] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 830.040084] RBP: 00007f33748e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 830.047349] R10: 0000800100020046 R11: 0000000000000246 R12: 0000000000000002 02:11:05 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa00f0000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:11:05 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 830.054619] R13: 00007ffda50c26bf R14: 00007f33748e0300 R15: 0000000000022000 02:11:05 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd00000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:11:05 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xe00000000000000}, 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 02:11:05 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000180)=0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020046) creat(&(0x7f0000000340)='./bus\x00', 0x0) [ 830.265958] kasan: CONFIG_KASAN_INLINE enabled [ 830.271071] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 830.278526] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 830.284765] CPU: 1 PID: 21555 Comm: kworker/1:28 Not tainted 4.19.211-syzkaller #0 [ 830.292465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 830.301820] Workqueue: pencrypt padata_parallel_worker [ 830.307086] RIP: 0010:scatterwalk_copychunks+0x4db/0x6a0 [ 830.312517] Code: ff df 80 3c 02 00 0f 85 98 01 00 00 49 8d 44 24 08 4d 89 26 48 89 c2 48 89 44 24 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 9f 01 00 00 48 b8 00 00 00 00 [ 830.331576] RSP: 0018:ffff88803ef87808 EFLAGS: 00010202 [ 830.336920] RAX: dffffc0000000000 RBX: 000000000000401d RCX: ffffffff83739e13 [ 830.344175] RDX: 0000000000000001 RSI: ffffffff83739e63 RDI: 0000000000000007 [ 830.351433] RBP: 000000000000401d R08: 0000000000000001 R09: 0000000000000000 [ 830.358689] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000000 [ 830.365941] R13: 0000000000001000 R14: ffff88803ef878b8 R15: 0000000000000001 [ 830.373193] FS: 0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 830.381573] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 830.387439] CR2: 00007ffdbd03c908 CR3: 00000000b1357000 CR4: 00000000003406e0 [ 830.394710] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 830.401967] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 830.409217] Call Trace: [ 830.411801] scatterwalk_map_and_copy+0x121/0x1a0 [ 830.416626] ? scatterwalk_ffwd+0x370/0x370 [ 830.420932] ? aesni_gcm_enc_avx2+0x196/0x1b0 [ 830.425409] ? kernel_fpu_enable+0x1f/0x40 [ 830.429632] ? kernel_fpu_end+0x11b/0x170 [ 830.433848] ? kernel_fpu_enable+0x40/0x40 [ 830.438069] gcmaes_encrypt.constprop.0+0x89f/0xd90 [ 830.443074] ? gcmaes_crypt_by_sg.constprop.0+0x1790/0x1790 [ 830.448798] ? __lock_acquire+0x6de/0x3ff0 [ 830.453015] ? mark_held_locks+0xf0/0xf0 [ 830.457058] ? mark_held_locks+0xf0/0xf0 [ 830.461102] ? generic_gcmaes_encrypt+0x108/0x160 [ 830.465922] ? generic_gcmaes_encrypt+0x108/0x160 [ 830.470869] ? helper_rfc4106_encrypt+0x310/0x310 [ 830.475701] ? gcmaes_wrapper_encrypt+0x157/0x1f0 [ 830.480537] ? pcrypt_aead_enc+0xbd/0x180 [ 830.484673] ? padata_parallel_worker+0x227/0x320 [ 830.489502] ? padata_do_parallel+0x700/0x700 [ 830.493985] ? process_one_work+0x864/0x1570 [ 830.498377] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 830.503043] ? worker_thread+0x64c/0x1130 [ 830.507184] ? process_one_work+0x1570/0x1570 [ 830.511660] ? kthread+0x33f/0x460 [ 830.515189] ? kthread_park+0x180/0x180 [ 830.519146] ? ret_from_fork+0x24/0x30 [ 830.523012] Modules linked in: [ 830.526298] ---[ end trace e2092fab8f10e8d9 ]--- [ 830.531069] RIP: 0010:scatterwalk_copychunks+0x4db/0x6a0 [ 830.536554] Code: ff df 80 3c 02 00 0f 85 98 01 00 00 49 8d 44 24 08 4d 89 26 48 89 c2 48 89 44 24 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 9f 01 00 00 48 b8 00 00 00 00 [ 830.555489] RSP: 0018:ffff88803ef87808 EFLAGS: 00010202 [ 830.560880] RAX: dffffc0000000000 RBX: 000000000000401d RCX: ffffffff83739e13 [ 830.568202] RDX: 0000000000000001 RSI: ffffffff83739e63 RDI: 0000000000000007 [ 830.575528] RBP: 000000000000401d R08: 0000000000000001 R09: 0000000000000000 [ 830.582791] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000000 [ 830.590127] R13: 0000000000001000 R14: ffff88803ef878b8 R15: 0000000000000001 [ 830.597446] FS: 0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 830.605881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 830.611759] CR2: 00007ffdbd03c908 CR3: 00000000b1357000 CR4: 00000000003406e0 [ 830.619055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 830.626890] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 830.634161] Kernel panic - not syncing: Fatal exception in interrupt [ 830.640836] Kernel Offset: disabled [ 830.644449] Rebooting in 86400 seconds..