0005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x46]})

05:33:58 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
unshare(0x8000000)
r2 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
umount2(0x0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0xb)
ftruncate(r3, 0x200004)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x6}, &(0x7f00000000c0)=0x90)

05:33:58 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x47]})

05:33:58 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:33:58 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
unshare(0x8000000)
r2 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
umount2(0x0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0xb)
ftruncate(r3, 0x200004)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x6}, &(0x7f00000000c0)=0x90)

05:33:58 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:33:58 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1497.077225][   T27] audit: type=1804 audit(1578807238.473:1811): pid=32546 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/817/file0" dev="sda1" ino=17558 res=1
05:33:58 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x48]})

[ 1497.184552][   T27] audit: type=1800 audit(1578807238.473:1812): pid=32547 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17566 res=0
[ 1497.235481][T32547] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 1497.376675][T32553] MINIX-fs: mounting unchecked file system, running fsck is recommended
05:33:58 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x49]})

[ 1497.497839][   T27] audit: type=1804 audit(1578807238.513:1813): pid=32550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/674/file0" dev="sda1" ino=17568 res=1
[ 1497.687993][   T27] audit: type=1800 audit(1578807238.573:1814): pid=32553 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17540 res=0
05:33:59 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1497.816093][ T8000] minix_free_inode: bit 1 already cleared
05:33:59 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4a]})

05:33:59 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1498.282122][   T27] audit: type=1804 audit(1578807239.673:1815): pid=32575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/899/file0" dev="sda1" ino=17575 res=1
[ 1498.309223][ T8405] minix_free_inode: bit 1 already cleared
05:33:59 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4b]})

05:33:59 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:00 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1498.806471][   T27] audit: type=1804 audit(1578807240.203:1816): pid=32584 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/670/file0" dev="sda1" ino=16945 res=1
05:34:00 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4c]})

[ 1498.991872][   T27] audit: type=1804 audit(1578807240.323:1817): pid=32593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/675/file0" dev="sda1" ino=17583 res=1
05:34:00 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:00 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4d]})

[ 1499.503283][   T27] audit: type=1804 audit(1578807240.893:1818): pid=32602 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/818/file0" dev="sda1" ino=17558 res=1
05:34:01 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4e]})

05:34:01 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4f]})

05:34:02 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:03 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:03 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x50]})

[ 1502.204446][   T27] audit: type=1804 audit(1578807243.603:1819): pid=32631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/900/file0" dev="sda1" ino=16560 res=1
05:34:03 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:03 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:03 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:03 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x51]})

05:34:03 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0x0, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1502.632469][   T27] audit: type=1804 audit(1578807244.033:1820): pid=32643 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/676/file0" dev="sda1" ino=17589 res=1
05:34:04 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x52]})

[ 1502.790954][   T27] audit: type=1804 audit(1578807244.083:1821): pid=32640 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/819/file0" dev="sda1" ino=17578 res=1
[ 1502.961198][   T27] audit: type=1804 audit(1578807244.193:1822): pid=32647 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/671/file0" dev="sda1" ino=17594 res=1
05:34:04 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x53]})

05:34:04 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x54]})

05:34:05 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x55]})

05:34:05 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:07 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:07 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x56]})

[ 1505.975708][   T27] audit: type=1804 audit(1578807247.373:1823): pid=32682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/901/file0" dev="sda1" ino=16548 res=1
05:34:07 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:07 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:07 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0x0, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:07 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:07 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x57]})

[ 1506.385658][   T27] audit: type=1804 audit(1578807247.783:1824): pid=32688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/677/file0" dev="sda1" ino=16570 res=1
05:34:07 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x58]})

[ 1506.552671][   T27] audit: type=1804 audit(1578807247.923:1825): pid=32694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/820/file0" dev="sda1" ino=16641 res=1
[ 1506.762009][   T27] audit: type=1804 audit(1578807248.013:1826): pid=32697 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/672/file0" dev="sda1" ino=16557 res=1
05:34:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x59]})

05:34:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5a]})

05:34:09 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5b]})

05:34:09 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:11 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0x0, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:11 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5c]})

05:34:11 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:11 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:11 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:11 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:11 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5d]})

[ 1509.847591][   T27] audit: type=1804 audit(1578807251.233:1827): pid=32734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/821/file0" dev="sda1" ino=16586 res=1
[ 1509.979030][   T27] audit: type=1804 audit(1578807251.283:1828): pid=32739 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/678/file0" dev="sda1" ino=16623 res=1
[ 1510.104522][   T27] audit: type=1804 audit(1578807251.303:1829): pid=32743 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/902/file0" dev="sda1" ino=16530 res=1
05:34:11 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5e]})

[ 1510.235203][   T27] audit: type=1804 audit(1578807251.343:1830): pid=32741 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/673/file0" dev="sda1" ino=16657 res=1
05:34:11 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5f]})

05:34:12 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x60]})

05:34:12 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:12 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:12 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x61]})

[ 1511.271947][   T27] audit: type=1804 audit(1578807252.663:1831): pid=305 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/822/file0" dev="sda1" ino=16582 res=1
05:34:12 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:12 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0xb)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'team_slave_0\x00', {0x8}, 0x6})
ftruncate(r2, 0x200004)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x6}, &(0x7f00000000c0)=0x90)

05:34:12 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x62]})

[ 1511.562621][   T27] audit: type=1804 audit(1578807252.963:1832): pid=313 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/679/file0" dev="sda1" ino=16590 res=1
05:34:13 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0xb)
ftruncate(r2, 0x200004)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x1})
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x6}, &(0x7f00000000c0)=0x90)

05:34:13 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x63]})

05:34:13 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:13 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:13 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x64]})

[ 1512.494526][   T27] audit: type=1804 audit(1578807253.893:1833): pid=336 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/904/file0" dev="sda1" ino=16600 res=1
05:34:14 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x65]})

05:34:14 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1513.282539][   T27] audit: type=1804 audit(1578807254.683:1834): pid=348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/675/file0" dev="sda1" ino=16584 res=1
05:34:15 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:15 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x66]})

[ 1513.907329][   T27] audit: type=1804 audit(1578807255.303:1835): pid=356 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/823/file0" dev="sda1" ino=16597 res=1
05:34:15 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:15 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x67]})

05:34:15 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1514.692234][   T27] audit: type=1804 audit(1578807256.083:1836): pid=369 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/680/file0" dev="sda1" ino=16614 res=1
05:34:16 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x68]})

05:34:16 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = creat(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1515.203303][   T27] audit: type=1804 audit(1578807256.603:1837): pid=378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/676/file0" dev="sda1" ino=16584 res=1
05:34:18 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:18 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x69]})

05:34:18 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6a]})

[ 1517.128781][   T27] audit: type=1804 audit(1578807258.523:1838): pid=387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/905/file0" dev="sda1" ino=16520 res=1
05:34:18 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:18 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6b]})

[ 1517.625558][   T27] audit: type=1804 audit(1578807259.013:1839): pid=400 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/824/file0" dev="sda1" ino=16582 res=1
05:34:19 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:19 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6c]})

[ 1517.979818][   T27] audit: type=1804 audit(1578807259.373:1840): pid=406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/681/file0" dev="sda1" ino=16597 res=1
05:34:19 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:19 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6d]})

05:34:20 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6e]})

05:34:20 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6f]})

05:34:21 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = creat(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1520.062527][   T27] audit: type=1804 audit(1578807261.453:1841): pid=434 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/677/file0" dev="sda1" ino=16584 res=1
05:34:21 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:21 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x70]})

05:34:21 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1520.504526][   T27] audit: type=1804 audit(1578807261.893:1842): pid=441 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/906/file0" dev="sda1" ino=16651 res=1
05:34:22 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0x0, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:22 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x71]})

[ 1521.074560][   T27] audit: type=1804 audit(1578807262.473:1843): pid=453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/825/file0" dev="sda1" ino=16655 res=1
05:34:22 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:22 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa8]})

[ 1521.436261][   T27] audit: type=1804 audit(1578807262.833:1844): pid=460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/682/file0" dev="sda1" ino=16597 res=1
05:34:22 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe4]})

05:34:23 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x300]})

05:34:23 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x390]})

05:34:24 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf00]})

05:34:24 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = creat(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:24 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2700]})

05:34:24 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = creat(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1523.664758][   T27] audit: type=1804 audit(1578807265.053:1845): pid=493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/907/file0" dev="sda1" ino=16661 res=1
[ 1523.879624][   T27] audit: type=1804 audit(1578807265.063:1846): pid=494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/678/file0" dev="sda1" ino=16662 res=1
05:34:25 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2800]})

05:34:25 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0x0, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:25 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1524.202441][   T27] audit: type=1804 audit(1578807265.593:1847): pid=504 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/826/file0" dev="sda1" ino=16640 res=1
05:34:26 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x0, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:26 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2900]})

[ 1524.945417][   T27] audit: type=1804 audit(1578807266.343:1848): pid=515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/683/file0" dev="sda1" ino=16666 res=1
05:34:26 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2a00]})

05:34:26 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2b00]})

05:34:27 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2c00]})

05:34:27 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2d00]})

05:34:28 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000040)={0x0, 0x20})
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x400)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0xb)
ftruncate(r3, 0x200004)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x6}, &(0x7f00000000c0)=0x90)

05:34:28 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2e00]})

05:34:29 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = creat(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:29 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0x0, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:29 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2f00]})

05:34:29 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:29 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x0, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:29 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = creat(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1527.866292][   T27] audit: type=1804 audit(1578807269.253:1849): pid=555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/827/file0" dev="sda1" ino=16650 res=1
05:34:29 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3000]})

[ 1527.980195][   T27] audit: type=1804 audit(1578807269.303:1850): pid=556 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/684/file0" dev="sda1" ino=16706 res=1
[ 1528.172256][   T27] audit: type=1804 audit(1578807269.303:1851): pid=559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/680/file0" dev="sda1" ino=16721 res=1
[ 1528.303793][   T27] audit: type=1804 audit(1578807269.473:1852): pid=567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/908/file0" dev="sda1" ino=16770 res=1
05:34:29 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3100]})

05:34:30 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3200]})

05:34:30 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3300]})

05:34:30 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:31 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3400]})

[ 1529.743123][   T27] audit: type=1804 audit(1578807271.143:1853): pid=589 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/828/file0" dev="sda1" ino=16640 res=1
05:34:31 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = creat(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:31 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x0, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:31 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3500]})

[ 1530.442683][   T27] audit: type=1804 audit(1578807271.833:1854): pid=605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/685/file0" dev="sda1" ino=16690 res=1
[ 1530.602181][   T27] audit: type=1804 audit(1578807271.993:1855): pid=609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/909/file0" dev="sda1" ino=16692 res=1
05:34:32 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:32 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:32 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3600]})

[ 1530.942440][   T27] audit: type=1804 audit(1578807272.333:1856): pid=619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/681/file0" dev="sda1" ino=16849 res=1
05:34:32 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3700]})

05:34:32 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3800]})

05:34:33 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3900]})

05:34:33 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3a00]})

05:34:33 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1532.841700][   T27] audit: type=1804 audit(1578807274.233:1857): pid=641 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/829/file0" dev="sda1" ino=17009 res=1
05:34:34 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3b00]})

05:34:35 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = creat(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:35 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3c00]})

05:34:35 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x0)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1534.058772][   T27] audit: type=1804 audit(1578807275.453:1858): pid=655 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/686/file0" dev="sda1" ino=16645 res=1
05:34:35 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1534.295428][   T27] audit: type=1804 audit(1578807275.683:1859): pid=660 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/910/file0" dev="sda1" ino=16680 res=1
05:34:35 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:35 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3d00]})

05:34:36 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3e00]})

05:34:36 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:36 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f00]})

05:34:36 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:37 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:37 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000]})

[ 1536.084970][   T27] audit: type=1804 audit(1578807277.483:1860): pid=696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/830/file0" dev="sda1" ino=16721 res=1
05:34:38 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:38 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = creat(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1536.956798][   T27] audit: type=1804 audit(1578807278.353:1861): pid=708 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/911/file0" dev="sda1" ino=16682 res=1
05:34:38 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x0)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:38 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4100]})

05:34:38 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:38 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1537.534779][   T27] audit: type=1804 audit(1578807278.923:1862): pid=721 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/687/file0" dev="sda1" ino=16707 res=1
05:34:39 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4200]})

05:34:39 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:39 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = creat(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:39 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4300]})

[ 1538.115043][   T27] audit: type=1804 audit(1578807279.513:1863): pid=733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/684/file0" dev="sda1" ino=16704 res=1
05:34:40 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:40 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4400]})

05:34:41 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1540.149134][   T27] audit: type=1804 audit(1578807281.543:1864): pid=755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/912/file0" dev="sda1" ino=16682 res=1
05:34:42 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x0)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4500]})

[ 1541.019536][   T27] audit: type=1804 audit(1578807282.413:1865): pid=763 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/688/file0" dev="sda1" ino=16728 res=1
05:34:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4600]})

05:34:43 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4700]})

05:34:43 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4800]})

05:34:43 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4900]})

05:34:44 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = creat(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:44 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4a00]})

[ 1542.972145][   T27] audit: type=1804 audit(1578807284.363:1866): pid=783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/685/file0" dev="sda1" ino=16704 res=1
05:34:44 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:44 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4b00]})

05:34:44 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:44 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1543.583736][   T27] audit: type=1804 audit(1578807284.973:1867): pid=798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/913/file0" dev="sda1" ino=16714 res=1
05:34:46 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:46 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4c00]})

05:34:46 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4d00]})

05:34:47 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0xb)
ftruncate(r3, 0x200004)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r4)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r7=>0x0})
r8 = socket(0x100000000011, 0x2, 0x0)
bind(r8, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4c57660af3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf205bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}]}, 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'rose0\x00', r9})

05:34:47 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4e00]})

[ 1546.276595][  T823] device veth1_to_bond entered promiscuous mode
05:34:47 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4f00]})

[ 1546.341813][  T823] lo: Cannot use loopback or non-ethernet device as HSR slave.
[ 1546.419061][  T823] device veth1_to_bond left promiscuous mode
05:34:48 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5000]})

05:34:48 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0xb)
ftruncate(r2, 0x200004)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
sendto$isdn(r2, &(0x7f0000000280)={0x5, 0xbb99, "19e1a0506f01778bed42f5ff9bce6d2d8901b56adc40e27104efcc963bfafcc2f4f28d94c464146fbb245b4969fa1eadee80d425b4df8c4d293a32336d441fffafd7d8b69d0bed1a6c32638b314d109a717e2b4e1acce693cb800f9cd778fbabb12a9509c3b455ef1d6aedc753f5cd9fa6c858f223d537cfdda5ddb1c5a93d6699be652560d339b0a48ef0f11816353b601961ddfcb01529a3e1708d3b3afbf61f45a8992cf8025043bb561c63595bbbb9d9669c85781622ea98aa52c9c249381be5f6aa65"}, 0xcd, 0x40, &(0x7f0000000000)={0x22, 0x2, 0x20, 0xf7, 0xff}, 0x6)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x6}, &(0x7f00000000c0)=0x90)

05:34:48 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:48 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1547.664963][   T27] audit: type=1804 audit(1578807289.053:1868): pid=841 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/914/file0" dev="sda1" ino=16711 res=1
05:34:49 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:49 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5100]})

05:34:50 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:50 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = creat(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:50 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5200]})

[ 1549.317199][   T27] audit: type=1804 audit(1578807290.713:1869): pid=857 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/688/file0" dev="sda1" ino=16744 res=1
05:34:50 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5300]})

05:34:51 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5400]})

05:34:51 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5500]})

05:34:52 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5600]})

05:34:52 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5700]})

05:34:53 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:53 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5800]})

05:34:53 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:53 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = creat(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1552.467479][   T27] audit: type=1804 audit(1578807293.863:1870): pid=891 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/834/file0" dev="sda1" ino=16739 res=1
[ 1552.684708][   T27] audit: type=1804 audit(1578807294.083:1871): pid=896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/915/file0" dev="sda1" ino=16520 res=1
05:34:54 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5900]})

05:34:54 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:54 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = creat(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:54 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5a00]})

[ 1553.284622][   T27] audit: type=1804 audit(1578807294.683:1872): pid=908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/689/file0" dev="sda1" ino=16775 res=1
05:34:55 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5b00]})

05:34:55 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5c00]})

05:34:56 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5d00]})

05:34:56 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5e00]})

05:34:57 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:57 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5f00]})

[ 1556.145080][   T27] audit: type=1804 audit(1578807297.543:1873): pid=940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/835/file0" dev="sda1" ino=16744 res=1
05:34:58 executing program 1:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:58 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:58 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6000]})

[ 1556.971971][   T27] audit: type=1804 audit(1578807298.363:1874): pid=950 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/916/file0" dev="sda1" ino=16784 res=1
05:34:58 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6100]})

05:34:58 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = creat(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:58 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:34:59 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6200]})

[ 1557.619764][   T27] audit: type=1804 audit(1578807299.013:1875): pid=961 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/692/file0" dev="sda1" ino=16773 res=1
[ 1557.855786][   T27] audit: type=1804 audit(1578807299.173:1876): pid=963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/690/file0" dev="sda1" ino=16610 res=1
05:34:59 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6300]})

05:35:00 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6400]})

05:35:00 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6500]})

05:35:01 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:01 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6600]})

[ 1559.931585][   T27] audit: type=1804 audit(1578807301.323:1877): pid=987 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/836/file0" dev="sda1" ino=16801 res=1
05:35:01 executing program 1:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1560.558686][   T27] audit: type=1804 audit(1578807301.953:1878): pid=996 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/917/file0" dev="sda1" ino=16764 res=1
05:35:02 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:02 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6700]})

05:35:02 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:02 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1561.371840][   T27] audit: type=1804 audit(1578807302.773:1879): pid=1007 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/693/file0" dev="sda1" ino=16805 res=1
05:35:02 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6800]})

05:35:03 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6900]})

05:35:03 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1562.427820][   T27] audit: type=1804 audit(1578807303.823:1880): pid=1023 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/837/file0" dev="sda1" ino=16803 res=1
05:35:03 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6a00]})

05:35:04 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6b00]})

05:35:04 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6c00]})

05:35:05 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6d00]})

05:35:05 executing program 1:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1564.440752][   T27] audit: type=1804 audit(1578807305.833:1881): pid=1045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/918/file0" dev="sda1" ino=16561 res=1
05:35:06 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x4e0001, 0x0)

05:35:06 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6e00]})

05:35:06 executing program 4:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:06 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:06 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:06 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6f00]})

[ 1565.484360][   T27] audit: type=1804 audit(1578807306.873:1882): pid=1065 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/838/file0" dev="sda1" ino=16773 res=1
[ 1565.577469][   T27] audit: type=1804 audit(1578807306.953:1883): pid=1069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/692/file0" dev="sda1" ino=16795 res=1
05:35:07 executing program 1:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:07 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7000]})

[ 1566.009653][   T27] audit: type=1804 audit(1578807307.403:1884): pid=1083 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/919/file0" dev="sda1" ino=16561 res=1
05:35:07 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7100]})

05:35:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9003]})

05:35:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe400]})

05:35:09 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1567.905869][   T27] audit: type=1804 audit(1578807309.303:1885): pid=1107 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/695/file0" dev="sda1" ino=16755 res=1
05:35:09 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000]})

05:35:09 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x4e0001, 0x0)

05:35:09 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:09 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1568.152481][   T27] audit: type=1804 audit(1578807309.553:1886): pid=1112 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/693/file0" dev="sda1" ino=16792 res=1
05:35:09 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfeffff]})

[ 1568.418082][   T27] audit: type=1804 audit(1578807309.813:1887): pid=1120 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/839/file0" dev="sda1" ino=16767 res=1
05:35:10 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]})

05:35:11 executing program 1:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:11 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]})

05:35:11 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1570.572900][   T27] audit: type=1804 audit(1578807311.973:1888): pid=1139 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/696/file0" dev="sda1" ino=16755 res=1
05:35:12 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3000000]})

[ 1570.837789][   T27] audit: type=1804 audit(1578807312.223:1889): pid=1145 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/920/file0" dev="sda1" ino=16816 res=1
05:35:12 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf000000]})

05:35:13 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x14980c87]})

05:35:13 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1572.074739][   T27] audit: type=1804 audit(1578807313.473:1890): pid=1160 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/840/file0" dev="sda1" ino=16767 res=1
05:35:13 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x4e0001, 0x0)

05:35:13 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:13 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x259add9e]})

05:35:13 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1572.689163][   T27] audit: type=1804 audit(1578807314.083:1891): pid=1171 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/841/file0" dev="sda1" ino=16765 res=1
05:35:14 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x27000000]})

[ 1572.920097][   T27] audit: type=1804 audit(1578807314.313:1892): pid=1178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/694/file0" dev="sda1" ino=16822 res=1
05:35:15 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x4e0001, 0x0)

05:35:15 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:15 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x28000000]})

05:35:15 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1574.022022][   T27] audit: type=1804 audit(1578807315.403:1893): pid=1190 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/842/file0" dev="sda1" ino=16815 res=1
05:35:15 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x29000000]})

[ 1574.176506][   T27] audit: type=1804 audit(1578807315.463:1894): pid=1197 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/697/file0" dev="sda1" ino=16831 res=1
05:35:15 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:15 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2a000000]})

[ 1574.610062][   T27] audit: type=1804 audit(1578807316.003:1895): pid=1206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/843/file0" dev="sda1" ino=16816 res=1
05:35:17 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

05:35:17 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:17 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2b000000]})

05:35:17 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:17 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1576.340438][   T27] audit: type=1804 audit(1578807317.733:1897): pid=1224 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/695/file0" dev="sda1" ino=16847 res=1
[ 1576.557507][   T27] audit: type=1804 audit(1578807317.723:1896): pid=1226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/698/file0" dev="sda1" ino=16865 res=1
[ 1576.719788][   T27] audit: type=1804 audit(1578807317.743:1898): pid=1223 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/844/file0" dev="sda1" ino=16849 res=1
05:35:18 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:18 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2c000000]})

05:35:18 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:18 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1577.452062][   T27] audit: type=1804 audit(1578807318.843:1899): pid=1241 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/845/file0" dev="sda1" ino=16945 res=1
[ 1577.618990][   T27] audit: type=1804 audit(1578807318.853:1900): pid=1243 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/699/file0" dev="sda1" ino=16977 res=1
05:35:19 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:19 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2d000000]})

05:35:19 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1577.838561][   T27] audit: type=1804 audit(1578807318.973:1901): pid=1249 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/922/file0" dev="sda1" ino=17057 res=1
[ 1578.081715][   T27] audit: type=1804 audit(1578807319.333:1902): pid=1255 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/700/file0" dev="sda1" ino=16829 res=1
[ 1578.259707][   T27] audit: type=1804 audit(1578807319.473:1903): pid=1259 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/846/file0" dev="sda1" ino=16945 res=1
05:35:19 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

05:35:19 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:19 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2e000000]})

[ 1578.614913][   T27] audit: type=1804 audit(1578807319.993:1904): pid=1272 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/923/file0" dev="sda1" ino=16929 res=1
05:35:21 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0xfffffffc, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:21 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:21 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2f000000]})

05:35:21 executing program 1 (fault-call:9 fault-nth:0):
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:21 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:21 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

[ 1580.236821][   T27] audit: type=1804 audit(1578807321.633:1905): pid=1291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/847/file0" dev="sda1" ino=16848 res=1
05:35:21 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x30000000]})

05:35:21 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:22 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x31000000]})

05:35:22 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:22 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x32000000]})

[ 1581.175134][ T1295] FAULT_INJECTION: forcing a failure.
[ 1581.175134][ T1295] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1581.290914][ T1295] CPU: 0 PID: 1295 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0
[ 1581.299670][ T1295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1581.309737][ T1295] Call Trace:
[ 1581.313054][ T1295]  dump_stack+0x11d/0x181
[ 1581.317455][ T1295]  should_fail.cold+0xa/0x1a
[ 1581.325461][ T1295]  should_fail_alloc_page+0x50/0x60
[ 1581.330813][ T1295]  __alloc_pages_nodemask+0xd2/0x310
[ 1581.336182][ T1295]  alloc_pages_vma+0x2a6/0x3a0
[ 1581.340969][ T1295]  new_page+0x176/0x240
[ 1581.345149][ T1295]  migrate_pages+0x295/0x18e0
[ 1581.349899][ T1295]  ? irq_work_interrupt+0xa/0x20
[ 1581.354868][ T1295]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1581.360273][ T1295]  do_mbind+0x937/0xa40
[ 1581.364480][ T1295]  ? switch_mm_irqs_off+0x1a1/0x5f0
[ 1581.369707][ T1295]  kernel_mbind+0x111/0x130
[ 1581.374225][ T1295]  __x64_sys_mbind+0x89/0xb0
[ 1581.378861][ T1295]  do_syscall_64+0xcc/0x3a0
[ 1581.383405][ T1295]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1581.389310][ T1295] RIP: 0033:0x45af49
[ 1581.393257][ T1295] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1581.413082][ T1295] RSP: 002b:00007f61cb19ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1581.422458][ T1295] RAX: ffffffffffffffda RBX: 00007f61cb19ec90 RCX: 000000000045af49
[ 1581.430475][ T1295] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1581.438456][ T1295] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1581.446482][ T1295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61cb19f6d4
[ 1581.454504][ T1295] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000007
[ 1581.572175][   T27] kauditd_printk_skb: 4 callbacks suppressed
[ 1581.572198][   T27] audit: type=1804 audit(1578807322.973:1910): pid=1320 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/703/file0" dev="sda1" ino=16843 res=1
05:35:23 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1582.036341][   T27] audit: type=1804 audit(1578807323.433:1911): pid=1327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/704/file0" dev="sda1" ino=16843 res=1
05:35:24 executing program 4 (fault-call:5 fault-nth:0):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:24 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3230aaed]})

05:35:25 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1583.725765][   T27] audit: type=1804 audit(1578807325.113:1912): pid=1335 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/697/file0" dev="sda1" ino=16875 res=1
[ 1583.977636][   T27] audit: type=1804 audit(1578807325.373:1913): pid=1340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/848/file0" dev="sda1" ino=16848 res=1
[ 1584.404110][ T1342] FAULT_INJECTION: forcing a failure.
[ 1584.404110][ T1342] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1584.443276][ T1342] CPU: 1 PID: 1342 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1584.452039][ T1342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1584.462101][ T1342] Call Trace:
[ 1584.465422][ T1342]  dump_stack+0x11d/0x181
[ 1584.469897][ T1342]  should_fail.cold+0xa/0x1a
[ 1584.474507][ T1342]  should_fail_alloc_page+0x50/0x60
[ 1584.479747][ T1342]  __alloc_pages_nodemask+0xd2/0x310
[ 1584.485059][ T1342]  alloc_pages_vma+0x2a6/0x3a0
[ 1584.489861][ T1342]  new_page+0x176/0x240
[ 1584.494032][ T1342]  migrate_pages+0x295/0x18e0
[ 1584.498728][ T1342]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1584.504461][ T1342]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1584.509443][ T1342]  do_mbind+0x937/0xa40
[ 1584.513637][ T1342]  kernel_mbind+0x111/0x130
[ 1584.518163][ T1342]  __x64_sys_mbind+0x89/0xb0
[ 1584.522835][ T1342]  do_syscall_64+0xcc/0x3a0
[ 1584.527355][ T1342]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1584.533257][ T1342] RIP: 0033:0x45af49
[ 1584.537364][ T1342] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1584.557168][ T1342] RSP: 002b:00007fd94644bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1584.565635][ T1342] RAX: ffffffffffffffda RBX: 00007fd94644bc90 RCX: 000000000045af49
[ 1584.573628][ T1342] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1584.581606][ T1342] RBP: 000000000075c070 R08: 0000000000000400 R09: 0002000000000002
[ 1584.589585][ T1342] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94644c6d4
[ 1584.597579][ T1342] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:35:26 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:26 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x33000000]})

05:35:26 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3230aaed]})

05:35:26 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1585.060083][   T27] audit: type=1804 audit(1578807326.453:1914): pid=1350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/705/file0" dev="sda1" ino=16895 res=1
05:35:26 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x34000000]})

[ 1585.220173][   T27] audit: type=1804 audit(1578807326.613:1915): pid=1355 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/925/file0" dev="sda1" ino=17169 res=1
05:35:26 executing program 3 (fault-call:5 fault-nth:0):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:27 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x35000000]})

05:35:27 executing program 4 (fault-call:5 fault-nth:1):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:27 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x36000000]})

[ 1586.302208][   T27] audit: type=1804 audit(1578807327.693:1916): pid=1372 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/698/file0" dev="sda1" ino=16843 res=1
05:35:27 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:28 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x37000000]})

[ 1586.731517][   T27] audit: type=1804 audit(1578807328.123:1917): pid=1381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/849/file0" dev="sda1" ino=16854 res=1
05:35:28 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x38000000]})

[ 1587.310899][ T1372] FAULT_INJECTION: forcing a failure.
[ 1587.310899][ T1372] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1587.388336][ T1372] CPU: 0 PID: 1372 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1587.396978][ T1372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1587.407102][ T1372] Call Trace:
[ 1587.410426][ T1372]  dump_stack+0x11d/0x181
[ 1587.414824][ T1372]  should_fail.cold+0xa/0x1a
[ 1587.419430][ T1372]  should_fail_alloc_page+0x50/0x60
[ 1587.424675][ T1372]  __alloc_pages_nodemask+0xd2/0x310
[ 1587.430759][ T1372]  alloc_pages_vma+0xc1/0x3a0
[ 1587.435473][ T1372]  new_page+0x10d/0x240
[ 1587.439637][ T1372]  migrate_pages+0x295/0x18e0
[ 1587.444332][ T1372]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1587.449285][ T1372]  do_mbind+0x937/0xa40
[ 1587.453447][ T1372]  ? __sb_end_write+0x73/0x100
[ 1587.458228][ T1372]  kernel_mbind+0x111/0x130
[ 1587.463515][ T1372]  __x64_sys_mbind+0x89/0xb0
[ 1587.468339][ T1372]  do_syscall_64+0xcc/0x3a0
[ 1587.472862][ T1372]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1587.478801][ T1372] RIP: 0033:0x45af49
[ 1587.482855][ T1372] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1587.502918][ T1372] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1587.511347][ T1372] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1587.519779][ T1372] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1587.530128][ T1372] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1587.538104][ T1372] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1587.546156][ T1372] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:35:29 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000000c0)={0x4, 0x9})
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:29 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x39000000]})

05:35:29 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:29 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:29 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3a000000]})

[ 1588.414906][   T27] audit: type=1804 audit(1578807329.803:1918): pid=1404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/706/file0" dev="sda1" ino=17153 res=1
[ 1588.551960][   T27] audit: type=1804 audit(1578807329.863:1919): pid=1403 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/850/file0" dev="sda1" ino=16896 res=1
[ 1588.727559][   T27] audit: type=1804 audit(1578807330.003:1920): pid=1410 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/926/file0" dev="sda1" ino=16827 res=1
05:35:30 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:30 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3b000000]})

05:35:30 executing program 4 (fault-call:5 fault-nth:2):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1589.562666][   T27] audit: type=1804 audit(1578807330.953:1921): pid=1422 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/699/file0" dev="sda1" ino=16878 res=1
05:35:31 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3c000000]})

05:35:31 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1590.003379][   T27] audit: type=1804 audit(1578807331.393:1922): pid=1433 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/851/file0" dev="sda1" ino=16876 res=1
05:35:31 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3d000000]})

[ 1590.604953][ T1422] FAULT_INJECTION: forcing a failure.
[ 1590.604953][ T1422] name fail_page_alloc, interval 1, probability 0, space 0, times 0
05:35:32 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3e000000]})

[ 1590.668863][ T1422] CPU: 1 PID: 1422 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1590.679749][ T1422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1590.689817][ T1422] Call Trace:
[ 1590.693179][ T1422]  dump_stack+0x11d/0x181
[ 1590.697534][ T1422]  should_fail.cold+0xa/0x1a
[ 1590.702217][ T1422]  should_fail_alloc_page+0x50/0x60
[ 1590.707461][ T1422]  __alloc_pages_nodemask+0xd2/0x310
[ 1590.712764][ T1422]  alloc_pages_vma+0xc1/0x3a0
[ 1590.717461][ T1422]  new_page+0x10d/0x240
[ 1590.721634][ T1422]  migrate_pages+0x295/0x18e0
[ 1590.726325][ T1422]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1590.731276][ T1422]  do_mbind+0x937/0xa40
[ 1590.735441][ T1422]  ? irq_work_interrupt+0xa/0x20
[ 1590.740410][ T1422]  kernel_mbind+0x111/0x130
[ 1590.745060][ T1422]  __x64_sys_mbind+0x89/0xb0
[ 1590.749680][ T1422]  do_syscall_64+0xcc/0x3a0
[ 1590.754216][ T1422]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1590.760225][ T1422] RIP: 0033:0x45af49
[ 1590.764220][ T1422] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1590.784301][ T1422] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1590.792819][ T1422] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1590.800798][ T1422] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1590.808922][ T1422] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1590.816899][ T1422] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1590.824881][ T1422] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:35:32 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f000000]})

05:35:32 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800106}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xec, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c, 0x30}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x30}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x520}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xec}, 0x1, 0x0, 0x0, 0x41}, 0x8000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1591.342396][   T27] audit: type=1804 audit(1578807332.733:1923): pid=1453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/927/file0" dev="sda1" ino=16900 res=1
05:35:32 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000]})

05:35:32 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:33 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x41000000]})

[ 1591.718746][   T27] audit: type=1804 audit(1578807333.113:1924): pid=1462 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/707/file0" dev="sda1" ino=17233 res=1
05:35:34 executing program 4 (fault-call:5 fault-nth:3):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:34 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x42000000]})

05:35:34 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
accept$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000100)=0x1c)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:34 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x4e0001, 0x0)

05:35:34 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = gettid()
tkill(r0, 0x15)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000e4c000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x1e, 0x2000000000000)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000100))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1593.636409][   T27] audit: type=1804 audit(1578807335.033:1925): pid=1478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/700/file0" dev="sda1" ino=16825 res=1
05:35:35 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x43000000]})

[ 1593.762122][   T27] audit: type=1804 audit(1578807335.033:1926): pid=1482 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/852/file0" dev="sda1" ino=16877 res=1
[ 1593.879766][   T27] audit: type=1804 audit(1578807335.073:1927): pid=1481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/928/file0" dev="sda1" ino=16890 res=1
05:35:35 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x4e0001, 0x0)

05:35:35 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x44000000]})

[ 1594.256116][   T27] audit: type=1804 audit(1578807335.653:1928): pid=1494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/708/file0" dev="sda1" ino=16521 res=1
05:35:35 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x45000000]})

[ 1594.492712][ T1478] FAULT_INJECTION: forcing a failure.
[ 1594.492712][ T1478] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1594.523444][ T1478] CPU: 1 PID: 1478 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1594.532160][ T1478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1594.542209][ T1478] Call Trace:
[ 1594.545504][ T1478]  dump_stack+0x11d/0x181
[ 1594.549908][ T1478]  should_fail.cold+0xa/0x1a
[ 1594.554616][ T1478]  should_fail_alloc_page+0x50/0x60
[ 1594.559881][ T1478]  __alloc_pages_nodemask+0xd2/0x310
[ 1594.565177][ T1478]  alloc_pages_vma+0xc1/0x3a0
[ 1594.569965][ T1478]  new_page+0x10d/0x240
[ 1594.574191][ T1478]  migrate_pages+0x295/0x18e0
[ 1594.579066][ T1478]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1594.584059][ T1478]  do_mbind+0x937/0xa40
[ 1594.588235][ T1478]  kernel_mbind+0x111/0x130
[ 1594.592793][ T1478]  __x64_sys_mbind+0x89/0xb0
[ 1594.597501][ T1478]  do_syscall_64+0xcc/0x3a0
[ 1594.602172][ T1478]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1594.608580][ T1478] RIP: 0033:0x45af49
[ 1594.612680][ T1478] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1594.632584][ T1478] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1594.641414][ T1478] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1594.649428][ T1478] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1594.657665][ T1478] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1594.665660][ T1478] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1594.673645][ T1478] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:35:36 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x46000000]})

05:35:36 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x47000000]})

05:35:36 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x48000000]})

05:35:37 executing program 4 (fault-call:5 fault-nth:4):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:37 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x49000000]})

[ 1596.241246][   T27] audit: type=1804 audit(1578807337.643:1929): pid=1530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/701/file0" dev="sda1" ino=16689 res=1
[ 1596.671203][ T1531] FAULT_INJECTION: forcing a failure.
[ 1596.671203][ T1531] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1596.718585][ T1531] CPU: 1 PID: 1531 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1596.728196][ T1531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1596.738915][ T1531] Call Trace:
[ 1596.742216][ T1531]  dump_stack+0x11d/0x181
[ 1596.746695][ T1531]  should_fail.cold+0xa/0x1a
[ 1596.751297][ T1531]  should_fail_alloc_page+0x50/0x60
[ 1596.756515][ T1531]  __alloc_pages_nodemask+0xd2/0x310
[ 1596.761932][ T1531]  alloc_pages_vma+0xc1/0x3a0
[ 1596.766932][ T1531]  new_page+0x10d/0x240
[ 1596.771337][ T1531]  migrate_pages+0x295/0x18e0
[ 1596.776826][ T1531]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1596.781889][ T1531]  do_mbind+0x937/0xa40
[ 1596.786129][ T1531]  kernel_mbind+0x111/0x130
[ 1596.790784][ T1531]  __x64_sys_mbind+0x89/0xb0
[ 1596.795516][ T1531]  do_syscall_64+0xcc/0x3a0
[ 1596.800032][ T1531]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1596.806011][ T1531] RIP: 0033:0x45af49
[ 1596.810430][ T1531] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1596.832736][ T1531] RSP: 002b:00007fd94646cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1596.841214][ T1531] RAX: ffffffffffffffda RBX: 00007fd94646cc90 RCX: 000000000045af49
[ 1596.849190][ T1531] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1596.857200][ T1531] RBP: 000000000075bfc8 R08: 0000000000000400 R09: 0002000000000002
[ 1596.865462][ T1531] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94646d6d4
[ 1596.873441][ T1531] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:35:38 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4a000000]})

05:35:38 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x4e0001, 0x0)

05:35:38 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000280))
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000000c0)=0x17, 0x4)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:38 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x4e0001, 0x0)

05:35:38 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000280))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000280))
write$apparmor_exec(r5, &(0x7f0000000140)={'stack ', '\x00\x05\a\x00\x00\x00\x8c\x99,\x90$\xcc\xf2\xb9\x1a\\\x91S\x98\xb1\x7f\x00\x00(\xa7\xe1\xcf[\xe1\x10U\xaf\xf6\xb9=\xf0\xe9;\"4LK\xf98\xceif\xb9\xe1b)?\x9c&\xcd\xe2\x8bg\xc1\xa9u\xc8\x00'}, 0x373b401d1e3edb70)

05:35:38 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4b000000]})

05:35:38 executing program 4 (fault-call:5 fault-nth:5):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1597.493067][   T27] audit: type=1804 audit(1578807338.883:1930): pid=1549 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/702/file0" dev="sda1" ino=16753 res=1
[ 1597.635210][   T27] audit: type=1804 audit(1578807338.933:1931): pid=1554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/929/file0" dev="sda1" ino=16886 res=1
05:35:39 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4c000000]})

[ 1597.828205][   T27] audit: type=1804 audit(1578807338.953:1932): pid=1553 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/709/file0" dev="sda1" ino=16879 res=1
[ 1598.002528][   T27] audit: type=1804 audit(1578807339.013:1933): pid=1560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/853/file0" dev="sda1" ino=16887 res=1
05:35:39 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4d000000]})

[ 1598.354682][ T1570] FAULT_INJECTION: forcing a failure.
[ 1598.354682][ T1570] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1598.433555][ T1570] CPU: 1 PID: 1570 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1598.442195][ T1570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1598.452260][ T1570] Call Trace:
[ 1598.455655][ T1570]  dump_stack+0x11d/0x181
[ 1598.460004][ T1570]  should_fail.cold+0xa/0x1a
[ 1598.464908][ T1570]  should_fail_alloc_page+0x50/0x60
[ 1598.470231][ T1570]  __alloc_pages_nodemask+0xd2/0x310
[ 1598.475546][ T1570]  alloc_pages_vma+0xc1/0x3a0
[ 1598.480295][ T1570]  new_page+0x10d/0x240
[ 1598.484455][ T1570]  migrate_pages+0x295/0x18e0
[ 1598.489144][ T1570]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1598.494091][ T1570]  do_mbind+0x937/0xa40
[ 1598.498436][ T1570]  kernel_mbind+0x111/0x130
[ 1598.503052][ T1570]  __x64_sys_mbind+0x89/0xb0
[ 1598.507773][ T1570]  do_syscall_64+0xcc/0x3a0
[ 1598.512292][ T1570]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1598.518203][ T1570] RIP: 0033:0x45af49
[ 1598.522169][ T1570] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1598.542031][ T1570] RSP: 002b:00007fd94644bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1598.550462][ T1570] RAX: ffffffffffffffda RBX: 00007fd94644bc90 RCX: 000000000045af49
[ 1598.558466][ T1570] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1598.566455][ T1570] RBP: 000000000075c070 R08: 0000000000000400 R09: 0002000000000002
[ 1598.574494][ T1570] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94644c6d4
05:35:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4e000000]})

[ 1598.582656][ T1570] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:35:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4f000000]})

05:35:40 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000280))
ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000680)={0xd, 0x1, {0x698a985d1405d256, 0x80, 0x6, {0x0, 0x3}, {0x1f, 0x800}, @const={0x6, {0x8001, 0x20, 0x4, 0xde}}}, {0x52, 0x1, 0xad0, {0x9, 0x8}, {0x5, 0x8}, @cond=[{0x3, 0x7, 0x7, 0x4, 0x6, 0x5}, {0x5, 0x8, 0xff00, 0x30, 0x6, 0x1}]}})
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xffffffff, 0xc0a40)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=<r5=>0x0, &(0x7f0000000180)=0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0xffff24a1, @dev={0xfe, 0x80, [], 0xa}, 0x6af}}, 0x0, 0x2}, &(0x7f0000000640)=0x90)
eventfd(0x0)
fallocate(r3, 0x48, 0x8001, 0x1)
r6 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r6, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x0, 0x0, 0xf0, 0x0, 0xf0, 0x228, 0x228, 0x228, 0x228, 0x228, 0x3, &(0x7f00000000c0), {[{{@ipv6={@mcast1, @rand_addr="2f703809781481a554407ffaaf26b232", [0xff000000, 0xff, 0xffff00], [0x0, 0xff, 0xffffff00], 'bridge_slave_0\x00', 'veth1_to_bridge\x00', {}, {}, 0x1, 0x80, 0x2, 0x4}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1f, 0x3, 0x8, 'netbios-ns\x00', 'syz0\x00', {0xd000000000000000}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x50000000]})

05:35:42 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x4e0001, 0x0)

[ 1601.053380][   T27] audit: type=1804 audit(1578807342.453:1934): pid=1596 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/854/file0" dev="sda1" ino=16876 res=1
05:35:42 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
r3 = dup2(r0, r2)
getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
fcntl$setstatus(r1, 0x4, 0x42000)
open(0x0, 0x180e40, 0x302)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:42 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x4e0001, 0x0)

05:35:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x51000000]})

05:35:42 executing program 4 (fault-call:5 fault-nth:6):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:42 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x10000}, 0x0, 0x0, 0x0, 0x8, 0x1000000000000000}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f0000807000/0x13000)=nil, 0x13000, 0x2000107, 0x6031, r1, 0x3000)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
ioctl$int_in(0xffffffffffffffff, 0xfc85, &(0x7f00000000c0)=0x4)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1000, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000280))
fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
getresuid(&(0x7f00000002c0)=<r7=>0x0, &(0x7f0000000300), &(0x7f0000000340))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x80, &(0x7f00000004c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@default_permissions='default_permissions'}], [{@fowner_lt={'fowner<', r7}}, {@obj_user={'obj_user', 0x3d, '/dev/snapshot\x00'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_eq={'uid', 0x3d, r8}}]}})

[ 1601.228615][   T27] audit: type=1804 audit(1578807342.623:1935): pid=1602 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/931/file0" dev="sda1" ino=16921 res=1
[ 1601.333399][ T1602] fuse: Bad value for 'user_id'
05:35:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x52000000]})

[ 1601.396097][   T27] audit: type=1804 audit(1578807342.673:1936): pid=1604 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/710/file0" dev="sda1" ino=16920 res=1
05:35:42 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'os2.', 'lo(*-}%\x00'}, &(0x7f0000000140)='/dev/snapshot\x00', 0xe, 0x1)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2)

[ 1601.614208][   T27] audit: type=1804 audit(1578807342.713:1937): pid=1601 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/703/file0" dev="sda1" ino=16919 res=1
05:35:43 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x53000000]})

[ 1601.820234][   T27] audit: type=1804 audit(1578807343.183:1938): pid=1617 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/932/file0" dev="sda1" ino=16933 res=1
05:35:43 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x54000000]})

[ 1602.086927][ T1622] FAULT_INJECTION: forcing a failure.
[ 1602.086927][ T1622] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1602.216966][ T1622] CPU: 0 PID: 1622 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1602.225598][ T1622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1602.235689][ T1622] Call Trace:
[ 1602.238995][ T1622]  dump_stack+0x11d/0x181
[ 1602.243348][ T1622]  should_fail.cold+0xa/0x1a
[ 1602.248092][ T1622]  should_fail_alloc_page+0x50/0x60
[ 1602.253337][ T1622]  __alloc_pages_nodemask+0xd2/0x310
[ 1602.258634][ T1622]  alloc_pages_vma+0xc1/0x3a0
[ 1602.263317][ T1622]  new_page+0x10d/0x240
[ 1602.267521][ T1622]  migrate_pages+0x295/0x18e0
[ 1602.272329][ T1622]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1602.277284][ T1622]  do_mbind+0x937/0xa40
[ 1602.281464][ T1622]  kernel_mbind+0x111/0x130
[ 1602.285985][ T1622]  __x64_sys_mbind+0x89/0xb0
[ 1602.290606][ T1622]  do_syscall_64+0xcc/0x3a0
[ 1602.295152][ T1622]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1602.301046][ T1622] RIP: 0033:0x45af49
[ 1602.304973][ T1622] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1602.324723][ T1622] RSP: 002b:00007fd94644bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1602.333256][ T1622] RAX: ffffffffffffffda RBX: 00007fd94644bc90 RCX: 000000000045af49
[ 1602.341239][ T1622] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1602.349212][ T1622] RBP: 000000000075c070 R08: 0000000000000400 R09: 0002000000000002
[ 1602.357247][ T1622] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94644c6d4
[ 1602.365230][ T1622] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:35:44 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x545a6959]})

05:35:44 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x55000000]})

05:35:46 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

[ 1604.804613][   T27] audit: type=1804 audit(1578807346.203:1939): pid=1644 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/855/file0" dev="sda1" ino=16876 res=1
05:35:46 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x56000000]})

05:35:46 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

05:35:46 executing program 4 (fault-call:5 fault-nth:7):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:46 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000280))
perf_event_open(0x0, 0x0, 0xb, r4, 0x1)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x40000, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xa0, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x475}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1e740895}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40080f4}, 0x8)

05:35:46 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
pipe(&(0x7f00000000c0))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1605.095069][   T27] audit: type=1804 audit(1578807346.493:1940): pid=1651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/933/file0" dev="sda1" ino=16944 res=1
[ 1605.278584][   T27] audit: type=1804 audit(1578807346.523:1941): pid=1653 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/704/file0" dev="sda1" ino=16945 res=1
05:35:46 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x57000000]})

[ 1605.487695][   T27] audit: type=1804 audit(1578807346.533:1942): pid=1654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/711/file0" dev="sda1" ino=16947 res=1
05:35:47 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x58000000]})

[ 1606.100831][ T1653] FAULT_INJECTION: forcing a failure.
[ 1606.100831][ T1653] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1606.167780][ T1653] CPU: 0 PID: 1653 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1606.176418][ T1653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1606.187280][ T1653] Call Trace:
[ 1606.190588][ T1653]  dump_stack+0x11d/0x181
[ 1606.194950][ T1653]  should_fail.cold+0xa/0x1a
[ 1606.199575][ T1653]  should_fail_alloc_page+0x50/0x60
[ 1606.204801][ T1653]  __alloc_pages_nodemask+0xd2/0x310
[ 1606.210106][ T1653]  alloc_pages_vma+0xc1/0x3a0
[ 1606.214797][ T1653]  new_page+0x10d/0x240
[ 1606.218994][ T1653]  migrate_pages+0x295/0x18e0
[ 1606.223731][ T1653]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1606.228707][ T1653]  do_mbind+0x937/0xa40
[ 1606.232971][ T1653]  kernel_mbind+0x111/0x130
[ 1606.237485][ T1653]  __x64_sys_mbind+0x89/0xb0
[ 1606.242102][ T1653]  do_syscall_64+0xcc/0x3a0
[ 1606.246628][ T1653]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1606.252560][ T1653] RIP: 0033:0x45af49
[ 1606.256474][ T1653] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1606.276083][ T1653] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1606.284503][ T1653] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1606.292588][ T1653] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1606.300582][ T1653] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1606.309625][ T1653] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
05:35:47 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x59000000]})

[ 1606.317606][ T1653] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:35:48 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x59695a54]})

05:35:48 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

05:35:48 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5a000000]})

[ 1607.269696][   T27] audit: type=1804 audit(1578807348.663:1943): pid=1687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/712/file0" dev="sda1" ino=16947 res=1
05:35:49 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

05:35:49 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5b000000]})

05:35:49 executing program 4 (fault-call:5 fault-nth:8):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:49 executing program 3:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
recvfrom$l2tp(r0, &(0x7f00000000c0)=""/22, 0x16, 0x20006100, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x41)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1608.167153][   T27] audit: type=1804 audit(1578807349.543:1944): pid=1699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/705/file0" dev="sda1" ino=16924 res=1
[ 1608.298836][   T27] audit: type=1804 audit(1578807349.673:1945): pid=1707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/856/file0" dev="sda1" ino=16950 res=1
05:35:49 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5c000000]})

05:35:49 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = gettid()
tkill(r1, 0x15)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x8000, &(0x7f0000000140)=""/177)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x103001, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000100))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:50 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5d000000]})

[ 1608.998406][ T1720] FAULT_INJECTION: forcing a failure.
[ 1608.998406][ T1720] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1609.086692][ T1720] CPU: 1 PID: 1720 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1609.095329][ T1720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1609.105460][ T1720] Call Trace:
[ 1609.108759][ T1720]  dump_stack+0x11d/0x181
[ 1609.113112][ T1720]  should_fail.cold+0xa/0x1a
[ 1609.117794][ T1720]  should_fail_alloc_page+0x50/0x60
[ 1609.123044][ T1720]  __alloc_pages_nodemask+0xd2/0x310
[ 1609.129138][ T1720]  alloc_pages_vma+0xc1/0x3a0
[ 1609.133823][ T1720]  new_page+0x10d/0x240
[ 1609.138099][ T1720]  migrate_pages+0x295/0x18e0
[ 1609.142799][ T1720]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1609.147772][ T1720]  do_mbind+0x937/0xa40
[ 1609.151998][ T1720]  kernel_mbind+0x111/0x130
[ 1609.156512][ T1720]  __x64_sys_mbind+0x89/0xb0
[ 1609.161116][ T1720]  do_syscall_64+0xcc/0x3a0
[ 1609.165703][ T1720]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1609.171601][ T1720] RIP: 0033:0x45af49
[ 1609.175509][ T1720] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1609.195152][ T1720] RSP: 002b:00007fd94644bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1609.203576][ T1720] RAX: ffffffffffffffda RBX: 00007fd94644bc90 RCX: 000000000045af49
[ 1609.211564][ T1720] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1609.219552][ T1720] RBP: 000000000075c070 R08: 0000000000000400 R09: 0002000000000002
[ 1609.227714][ T1720] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94644c6d4
05:35:50 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5e000000]})

[ 1609.235722][ T1720] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:35:51 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5f000000]})

05:35:51 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x60000000]})

05:35:51 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

05:35:51 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x61000000]})

[ 1610.484136][   T27] audit: type=1804 audit(1578807351.883:1946): pid=1736 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/713/file0" dev="sda1" ino=16770 res=1
05:35:52 executing program 0:
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x0, 0x0, 0xfffffffc, {0x0, 0xcf}, 0xa, 0x9})
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

05:35:52 executing program 4 (fault-call:5 fault-nth:9):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:52 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x62000000]})

[ 1611.605432][   T27] audit: type=1804 audit(1578807352.993:1947): pid=1747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/706/file0" dev="sda1" ino=16943 res=1
[ 1611.840562][   T27] audit: type=1804 audit(1578807353.183:1948): pid=1751 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir993457777/syzkaller.giIb4g/857/file0" dev="sda1" ino=16957 res=1
05:35:53 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x4, 0x9080)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000100), 0x4)

05:35:53 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x63000000]})

05:35:53 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3)
ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000200)={0xda, &(0x7f0000000100)="df62df94601d40b179d37b91cbb20b055b29fd8a66c714a769b5337128a85375b2c6097970d4e2055c4b8c531f0d3f65578a671f63231ad08541865bf542e3e5cf26ff782f929c40caa55dd5123c7d8918da633e479be9c4946c6cfa93f5853389625d1caf014024ef8489b619a83406f675a7afe21921f0e1e8b014c50191a58ec3a66ef9393b881cad82bf1c1c00c41bb10604ca9e192fd9e5e0e88d2169142b1f8d286fdbd8774ad0ef1de25d58a19b827b11b2e9712f6ff57cbbc55737dc412fccf74ae5eb885ccc8b5fd4f1013c75322916e887e62c6008"})
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f00000000c0))
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1612.171387][ T1747] FAULT_INJECTION: forcing a failure.
[ 1612.171387][ T1747] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1612.230427][ T1747] CPU: 0 PID: 1747 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1612.239057][ T1747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1612.249159][ T1747] Call Trace:
[ 1612.252474][ T1747]  dump_stack+0x11d/0x181
[ 1612.256826][ T1747]  should_fail.cold+0xa/0x1a
[ 1612.261444][ T1747]  should_fail_alloc_page+0x50/0x60
[ 1612.266661][ T1747]  __alloc_pages_nodemask+0xd2/0x310
[ 1612.272051][ T1747]  alloc_pages_vma+0xc1/0x3a0
[ 1612.276743][ T1747]  new_page+0x10d/0x240
[ 1612.280918][ T1747]  migrate_pages+0x295/0x18e0
[ 1612.285775][ T1747]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1612.290826][ T1747]  do_mbind+0x937/0xa40
[ 1612.294991][ T1747]  ? irq_work_interrupt+0xa/0x20
[ 1612.300094][ T1747]  kernel_mbind+0x111/0x130
[ 1612.304649][ T1747]  __x64_sys_mbind+0x89/0xb0
[ 1612.309255][ T1747]  do_syscall_64+0xcc/0x3a0
[ 1612.313829][ T1747]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1612.319774][ T1747] RIP: 0033:0x45af49
[ 1612.323714][ T1747] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1612.343328][ T1747] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1612.351754][ T1747] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1612.359752][ T1747] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1612.368161][ T1747] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
05:35:53 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x64000000]})

[ 1612.376198][ T1747] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1612.384200][ T1747] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
[ 1612.404337][   T27] audit: type=1804 audit(1578807353.803:1949): pid=1761 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/935/file0" dev="sda1" ino=16942 res=1
05:35:53 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/245, 0xf5}], 0x1, 0x500)

05:35:54 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x65000000]})

05:35:54 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = open(0x0, 0x8000101842, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
fcntl$setsig(r2, 0xa, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
fcntl$setlease(r2, 0x400, 0x0)
r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_keyring_id(0x0, r3, 0x0)
r4 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0)
pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
socket$netlink(0x10, 0x3, 0x13)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000140)={0x7fffffff, 0xbd})
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000380)={0xe, {0x3, 0x1f, 0xd6, 0x8f, "e845abdf364501831a53c8d5206a25ba7768063663a37616b9787180a3792c276fb8f7eec13f0b7ae29d01d4606e0c2d45de983bed243c119b10fced38e74f2aacd5fe8a700bec725e5901cfd0287abe67bf5397c5dda78531b14d72777f4a1afc160b1d3d17dd63ad23189090b7f50822a74f78b6ba587919e70d82b6af16bab12f99a92cc47d8f37ef5e48fb22d9"}}, 0x9b)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r4)

05:35:54 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x66000000]})

[ 1613.400220][ T1792] blk_update_request: I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
05:35:55 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x67000000]})

[ 1614.004556][ T1802] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[ 1614.047312][ T1793] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[ 1614.058773][ T1793] Buffer I/O error on dev loop0, logical block 0, lost async page write
[ 1614.067860][ T1793] blk_update_request: I/O error, dev loop0, sector 4 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[ 1614.079175][ T1793] Buffer I/O error on dev loop0, logical block 1, lost async page write
[ 1614.088280][ T1793] blk_update_request: I/O error, dev loop0, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[ 1614.099809][ T1793] Buffer I/O error on dev loop0, logical block 2, lost async page write
[ 1614.108679][ T1793] blk_update_request: I/O error, dev loop0, sector 12 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[ 1614.120229][ T1793] Buffer I/O error on dev loop0, logical block 3, lost async page write
[ 1614.128981][ T1793] blk_update_request: I/O error, dev loop0, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[ 1614.140561][ T1793] Buffer I/O error on dev loop0, logical block 4, lost async page write
[ 1614.149531][ T1793] blk_update_request: I/O error, dev loop0, sector 20 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[ 1614.160967][ T1793] Buffer I/O error on dev loop0, logical block 5, lost async page write
[ 1614.170010][ T1793] blk_update_request: I/O error, dev loop0, sector 24 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[ 1614.179669][   T27] audit: type=1804 audit(1578807355.503:1950): pid=1761 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/935/file0" dev="sda1" ino=16942 res=1
[ 1614.181306][ T1793] Buffer I/O error on dev loop0, logical block 6, lost async page write
[ 1614.214461][ T1793] blk_update_request: I/O error, dev loop0, sector 28 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[ 1614.225918][ T1793] Buffer I/O error on dev loop0, logical block 7, lost async page write
[ 1614.234355][ T1793] Buffer I/O error on dev loop0, logical block 8, lost async page write
[ 1614.242751][ T1793] Buffer I/O error on dev loop0, logical block 9, lost async page write
05:35:55 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x68000000]})

05:35:55 executing program 4 (fault-call:5 fault-nth:10):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:55 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
poll(&(0x7f0000000140)=[{r0, 0x120}], 0x1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x0, './bus/file1\x00'}, 0x6e)

[ 1614.589051][   T27] audit: type=1804 audit(1578807355.983:1951): pid=1820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/707/file0" dev="sda1" ino=16956 res=1
[ 1614.976637][ T1834] FAULT_INJECTION: forcing a failure.
[ 1614.976637][ T1834] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1615.005152][ T1834] CPU: 1 PID: 1834 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1615.013828][ T1834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1615.023887][ T1834] Call Trace:
[ 1615.027188][ T1834]  dump_stack+0x11d/0x181
[ 1615.031635][ T1834]  should_fail.cold+0xa/0x1a
[ 1615.036242][ T1834]  should_fail_alloc_page+0x50/0x60
[ 1615.041514][ T1834]  __alloc_pages_nodemask+0xd2/0x310
[ 1615.046992][ T1834]  alloc_pages_vma+0xc1/0x3a0
[ 1615.051770][ T1834]  new_page+0x10d/0x240
[ 1615.055936][ T1834]  migrate_pages+0x295/0x18e0
[ 1615.060653][ T1834]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1615.065653][ T1834]  do_mbind+0x937/0xa40
[ 1615.069849][ T1834]  kernel_mbind+0x111/0x130
[ 1615.074385][ T1834]  __x64_sys_mbind+0x89/0xb0
[ 1615.079103][ T1834]  do_syscall_64+0xcc/0x3a0
[ 1615.083621][ T1834]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1615.089604][ T1834] RIP: 0033:0x45af49
[ 1615.093534][ T1834] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1615.113150][ T1834] RSP: 002b:00007fd94644bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1615.121675][ T1834] RAX: ffffffffffffffda RBX: 00007fd94644bc90 RCX: 000000000045af49
[ 1615.129837][ T1834] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1615.138173][ T1834] RBP: 000000000075c070 R08: 0000000000000400 R09: 0002000000000002
[ 1615.146154][ T1834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94644c6d4
[ 1615.154536][ T1834] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:35:56 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000280))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0xffffffffffffff2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:56 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = open(0x0, 0x8000101842, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
fcntl$setsig(r2, 0xa, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
fcntl$setlease(r2, 0x400, 0x0)
r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_keyring_id(0x0, r3, 0x0)
r4 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0)
pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
socket$netlink(0x10, 0x3, 0x13)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000140)={0x7fffffff, 0xbd})
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000380)={0xe, {0x3, 0x1f, 0xd6, 0x8f, "e845abdf364501831a53c8d5206a25ba7768063663a37616b9787180a3792c276fb8f7eec13f0b7ae29d01d4606e0c2d45de983bed243c119b10fced38e74f2aacd5fe8a700bec725e5901cfd0287abe67bf5397c5dda78531b14d72777f4a1afc160b1d3d17dd63ad23189090b7f50822a74f78b6ba587919e70d82b6af16bab12f99a92cc47d8f37ef5e48fb22d9"}}, 0x9b)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r4)

05:35:56 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0xea1, 0x3ff, 0x0, 0x5, 0x9, 0x8001, 0x5, 0x1, 0x8, 0x100, 0x4, 0x6, 0xf8, 0x67, 0x0, 0x4, {0x400, 0x7fff}, 0x6, 0x1}})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:56 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x69000000]})

05:35:56 executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = open(0x0, 0x8000101842, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
fcntl$setsig(r2, 0xa, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
fcntl$setlease(r2, 0x400, 0x0)
r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_keyring_id(0x0, r3, 0x0)
r4 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0)
pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
socket$netlink(0x10, 0x3, 0x13)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000140)={0x7fffffff, 0xbd})
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000380)={0xe, {0x3, 0x1f, 0xd6, 0x8f, "e845abdf364501831a53c8d5206a25ba7768063663a37616b9787180a3792c276fb8f7eec13f0b7ae29d01d4606e0c2d45de983bed243c119b10fced38e74f2aacd5fe8a700bec725e5901cfd0287abe67bf5397c5dda78531b14d72777f4a1afc160b1d3d17dd63ad23189090b7f50822a74f78b6ba587919e70d82b6af16bab12f99a92cc47d8f37ef5e48fb22d9"}}, 0x9b)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r4)

05:35:56 executing program 4 (fault-call:5 fault-nth:11):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1615.505184][   T27] audit: type=1804 audit(1578807356.903:1953): pid=1850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/708/file0" dev="sda1" ino=16973 res=1
05:35:56 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6a000000]})

05:35:57 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = open(0x0, 0x8000101842, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
fcntl$setsig(r2, 0xa, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
fcntl$setlease(r2, 0x400, 0x0)
r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_keyring_id(0x0, r3, 0x0)
r4 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0)
pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
socket$netlink(0x10, 0x3, 0x13)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000140)={0x7fffffff, 0xbd})
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000380)={0xe, {0x3, 0x1f, 0xd6, 0x8f, "e845abdf364501831a53c8d5206a25ba7768063663a37616b9787180a3792c276fb8f7eec13f0b7ae29d01d4606e0c2d45de983bed243c119b10fced38e74f2aacd5fe8a700bec725e5901cfd0287abe67bf5397c5dda78531b14d72777f4a1afc160b1d3d17dd63ad23189090b7f50822a74f78b6ba587919e70d82b6af16bab12f99a92cc47d8f37ef5e48fb22d9"}}, 0x9b)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r4)

[ 1615.739161][   T27] audit: type=1804 audit(1578807356.893:1952): pid=1848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/936/file0" dev="sda1" ino=16969 res=1
05:35:57 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6b000000]})

[ 1615.983707][ T1850] FAULT_INJECTION: forcing a failure.
[ 1615.983707][ T1850] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1615.998276][ T1850] CPU: 1 PID: 1850 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1616.006924][ T1850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1616.017002][ T1850] Call Trace:
[ 1616.020306][ T1850]  dump_stack+0x11d/0x181
[ 1616.024647][ T1850]  ? printk+0x8f/0x91
[ 1616.028736][ T1850]  should_fail.cold+0xa/0x1a
[ 1616.033424][ T1850]  should_fail_alloc_page+0x50/0x60
[ 1616.038650][ T1850]  __alloc_pages_nodemask+0xd2/0x310
[ 1616.043958][ T1850]  alloc_pages_vma+0xc1/0x3a0
[ 1616.048795][ T1850]  new_page+0x10d/0x240
[ 1616.052969][ T1850]  migrate_pages+0x295/0x18e0
[ 1616.057661][ T1850]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1616.062683][ T1850]  do_mbind+0x937/0xa40
[ 1616.066857][ T1850]  kernel_mbind+0x111/0x130
[ 1616.071538][ T1850]  __x64_sys_mbind+0x89/0xb0
[ 1616.076217][ T1850]  do_syscall_64+0xcc/0x3a0
[ 1616.080803][ T1850]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1616.086702][ T1850] RIP: 0033:0x45af49
[ 1616.090722][ T1850] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1616.110415][ T1850] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1616.118963][ T1850] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
05:35:57 executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = open(0x0, 0x8000101842, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
fcntl$setsig(r2, 0xa, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
fcntl$setlease(r2, 0x400, 0x0)
r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_keyring_id(0x0, r3, 0x0)
r4 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0)
pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
socket$netlink(0x10, 0x3, 0x13)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000140)={0x7fffffff, 0xbd})
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000380)={0xe, {0x3, 0x1f, 0xd6, 0x8f, "e845abdf364501831a53c8d5206a25ba7768063663a37616b9787180a3792c276fb8f7eec13f0b7ae29d01d4606e0c2d45de983bed243c119b10fced38e74f2aacd5fe8a700bec725e5901cfd0287abe67bf5397c5dda78531b14d72777f4a1afc160b1d3d17dd63ad23189090b7f50822a74f78b6ba587919e70d82b6af16bab12f99a92cc47d8f37ef5e48fb22d9"}}, 0x9b)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r4)

[ 1616.126947][ T1850] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1616.134959][ T1850] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1616.143000][ T1850] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1616.150995][ T1850] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:35:57 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6c000000]})

05:35:57 executing program 5:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040), 0x4)

05:35:58 executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = open(0x0, 0x8000101842, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
fcntl$setsig(r2, 0xa, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
fcntl$setlease(r2, 0x400, 0x0)
r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_keyring_id(0x0, r3, 0x0)
r4 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0)
pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
socket$netlink(0x10, 0x3, 0x13)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000140)={0x7fffffff, 0xbd})
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000380)={0xe, {0x3, 0x1f, 0xd6, 0x8f, "e845abdf364501831a53c8d5206a25ba7768063663a37616b9787180a3792c276fb8f7eec13f0b7ae29d01d4606e0c2d45de983bed243c119b10fced38e74f2aacd5fe8a700bec725e5901cfd0287abe67bf5397c5dda78531b14d72777f4a1afc160b1d3d17dd63ad23189090b7f50822a74f78b6ba587919e70d82b6af16bab12f99a92cc47d8f37ef5e48fb22d9"}}, 0x9b)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r4)

05:35:58 executing program 4 (fault-call:5 fault-nth:12):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1617.110107][   T27] audit: type=1804 audit(1578807358.503:1954): pid=1903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/709/file0" dev="sda1" ino=16972 res=1
[ 1617.261565][ T1910] FAULT_INJECTION: forcing a failure.
[ 1617.261565][ T1910] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1617.277996][ T1910] CPU: 1 PID: 1910 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1617.286601][ T1910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1617.296662][ T1910] Call Trace:
[ 1617.300045][ T1910]  dump_stack+0x11d/0x181
[ 1617.304660][ T1910]  should_fail.cold+0xa/0x1a
[ 1617.309290][ T1910]  should_fail_alloc_page+0x50/0x60
[ 1617.314557][ T1910]  __alloc_pages_nodemask+0xd2/0x310
[ 1617.319862][ T1910]  alloc_pages_vma+0xc1/0x3a0
[ 1617.324572][ T1910]  new_page+0x10d/0x240
[ 1617.328750][ T1910]  migrate_pages+0x295/0x18e0
[ 1617.333443][ T1910]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1617.338431][ T1910]  do_mbind+0x937/0xa40
[ 1617.342638][ T1910]  kernel_mbind+0x111/0x130
[ 1617.347175][ T1910]  __x64_sys_mbind+0x89/0xb0
[ 1617.351938][ T1910]  do_syscall_64+0xcc/0x3a0
[ 1617.356468][ T1910]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1617.362488][ T1910] RIP: 0033:0x45af49
[ 1617.366431][ T1910] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1617.386122][ T1910] RSP: 002b:00007fd94644bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1617.394542][ T1910] RAX: ffffffffffffffda RBX: 00007fd94644bc90 RCX: 000000000045af49
[ 1617.402521][ T1910] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1617.410504][ T1910] RBP: 000000000075c070 R08: 0000000000000400 R09: 0002000000000002
[ 1617.418585][ T1910] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94644c6d4
[ 1617.426563][ T1910] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:35:59 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6d000000]})

05:35:59 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)

05:35:59 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ptrace$getregs(0xe, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/37)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r8, 0x80081272, &(0x7f0000000280))
ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f00000003c0)={0xa10000, 0x8, 0x48de, <r9=>0xffffffffffffffff, 0x0, &(0x7f0000000380)={0xa00903, 0x925, [], @p_u16=&(0x7f0000000340)=0x101}})
r10 = socket(0x10, 0x3, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_GET_KEY(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r11, 0x1}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r11, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x8, 0x3d, 0xe0}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000005}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r14=>0x0})
r15 = socket(0x100000000011, 0x2, 0x0)
bind(r15, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4c57660af3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf205bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE1={0x8, 0x1, r14}, @IFLA_HSR_SLAVE2={0x8, 0x2, r16}]}}}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r9, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r11, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r16}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000280))
setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000300)=0x9, 0x4)
ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000280))
r17 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r17, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000280))
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f00000000c0)={0x7ff, 0x4, 0x0, 0x2})
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000100)=0x10000, 0x4)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:59 executing program 4 (fault-call:5 fault-nth:13):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:35:59 executing program 0:
open(0x0, 0x8000101842, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r2 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
socket$netlink(0x10, 0x3, 0x13)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000140)={0x7fffffff, 0xbd})
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)

05:35:59 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x80800, 0x124)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x340000, 0x10)
ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000200)=0x9)
statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=""/112)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1617.876838][   T27] audit: type=1804 audit(1578807359.273:1955): pid=1935 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/937/file0" dev="sda1" ino=17006 res=1
05:35:59 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6e000000]})

[ 1618.025785][   T27] audit: type=1804 audit(1578807359.303:1956): pid=1924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/710/file0" dev="sda1" ino=17001 res=1
[ 1618.147894][ T1923] device veth1_to_bond entered promiscuous mode
[ 1618.193035][ T1923] lo: Cannot use loopback or non-ethernet device as HSR slave.
05:35:59 executing program 0:
open(0x0, 0x8000101842, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r2 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
socket$netlink(0x10, 0x3, 0x13)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000140)={0x7fffffff, 0xbd})
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)

[ 1618.270041][ T1923] device veth1_to_bond left promiscuous mode
05:35:59 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6f000000]})

05:36:00 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)

05:36:00 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x70000000]})

[ 1618.718455][ T1924] FAULT_INJECTION: forcing a failure.
[ 1618.718455][ T1924] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1618.778587][ T1924] CPU: 1 PID: 1924 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1618.787556][ T1924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1618.797645][ T1924] Call Trace:
[ 1618.801052][ T1924]  dump_stack+0x11d/0x181
[ 1618.805519][ T1924]  should_fail.cold+0xa/0x1a
[ 1618.810133][ T1924]  should_fail_alloc_page+0x50/0x60
[ 1618.815360][ T1924]  __alloc_pages_nodemask+0xd2/0x310
[ 1618.820838][ T1924]  alloc_pages_vma+0xc1/0x3a0
[ 1618.825970][ T1924]  new_page+0x10d/0x240
[ 1618.830154][ T1924]  migrate_pages+0x295/0x18e0
[ 1618.834857][ T1924]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1618.839826][ T1924]  do_mbind+0x937/0xa40
[ 1618.844040][ T1924]  ? irq_work_interrupt+0xa/0x20
[ 1618.849060][ T1924]  kernel_mbind+0x111/0x130
[ 1618.853599][ T1924]  __x64_sys_mbind+0x89/0xb0
[ 1618.858248][ T1924]  do_syscall_64+0xcc/0x3a0
[ 1618.862890][ T1924]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1618.868781][ T1924] RIP: 0033:0x45af49
[ 1618.872848][ T1924] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1618.892650][ T1924] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1618.901063][ T1924] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1618.909786][ T1924] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1618.917795][ T1924] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1618.925819][ T1924] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1618.933807][ T1924] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:36:00 executing program 0:
open(0x0, 0x8000101842, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r2 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
socket$netlink(0x10, 0x3, 0x13)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000140)={0x7fffffff, 0xbd})
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)

[ 1618.972080][ T1966] device veth1_to_bond entered promiscuous mode
[ 1619.011585][ T1966] lo: Cannot use loopback or non-ethernet device as HSR slave.
[ 1619.079691][ T1966] device veth1_to_bond left promiscuous mode
05:36:00 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x71000000]})

[ 1619.244049][   T27] audit: type=1804 audit(1578807360.643:1957): pid=1980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/937/file0" dev="sda1" ino=17006 res=1
05:36:00 executing program 0:
open(0x0, 0x8000101842, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r2 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
socket$netlink(0x10, 0x3, 0x13)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000140)={0x7fffffff, 0xbd})
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)

05:36:00 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000340)={0x9b0000, 0x800, 0xffffffc1, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9a091e, 0x7, [], @ptr=0xfffffffffffeffff}})
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000003c0)=0x2de1, 0x4)
ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000380)=0x3)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000280))
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00')
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r7)
r8 = openat(r7, &(0x7f0000000400)='./file0\x00', 0x7f6af4be18c3c713, 0x8)
ioctl$KDDISABIO(r8, 0x4b37)
sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x384edb505ae05b97}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fddbdf20060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000600040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4004)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x4010, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000002c0)={0x4, &(0x7f0000000240)=[{}, {}, {}, {}]})
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xc)

05:36:00 executing program 4 (fault-call:5 fault-nth:14):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:00 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0xffffffffffffff55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x3)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:01 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x870c9814]})

[ 1619.681163][   T27] audit: type=1804 audit(1578807361.073:1958): pid=2008 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/938/file0" dev="sda1" ino=17015 res=1
05:36:01 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
close(r0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000e00))

05:36:01 executing program 0:

05:36:01 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x144)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f000064c000/0x1000)=nil, 0x1000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)
fsetxattr$security_evm(r1, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@v1={0x2, "dbc3bff07c00"}, 0x7, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x49003, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={<r3=>0x0, 0x7, 0x2, 0x2, 0x2, 0x8}, &(0x7f0000000240)=0x14)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000280)={r3, 0xff}, &(0x7f00000002c0)=0x8)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1619.983448][   T27] audit: type=1804 audit(1578807361.233:1959): pid=2011 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/711/file0" dev="sda1" ino=16954 res=1
05:36:01 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x90030000]})

05:36:01 executing program 0:

05:36:01 executing program 5:

05:36:01 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x1})

05:36:01 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9edd9a25]})

05:36:02 executing program 0:

[ 1620.834046][ T2011] FAULT_INJECTION: forcing a failure.
[ 1620.834046][ T2011] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1620.909631][ T2011] CPU: 1 PID: 2011 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1620.918278][ T2011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1620.928371][ T2011] Call Trace:
[ 1620.931757][ T2011]  dump_stack+0x11d/0x181
[ 1620.936131][ T2011]  should_fail.cold+0xa/0x1a
[ 1620.940744][ T2011]  should_fail_alloc_page+0x50/0x60
[ 1620.945956][ T2011]  __alloc_pages_nodemask+0xd2/0x310
[ 1620.951291][ T2011]  alloc_pages_vma+0xc1/0x3a0
[ 1620.956019][ T2011]  new_page+0x10d/0x240
[ 1620.960214][ T2011]  migrate_pages+0x295/0x18e0
[ 1620.964919][ T2011]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1620.969893][ T2011]  do_mbind+0x937/0xa40
[ 1620.974086][ T2011]  kernel_mbind+0x111/0x130
[ 1620.978662][ T2011]  __x64_sys_mbind+0x89/0xb0
[ 1620.983272][ T2011]  do_syscall_64+0xcc/0x3a0
[ 1620.987802][ T2011]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1620.993698][ T2011] RIP: 0033:0x45af49
[ 1620.997662][ T2011] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1621.018797][ T2011] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1621.027223][ T2011] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1621.035448][ T2011] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1621.043453][ T2011] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1621.051441][ T2011] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1621.059522][ T2011] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:36:02 executing program 4 (fault-call:5 fault-nth:15):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1621.373671][   T27] audit: type=1804 audit(1578807362.773:1960): pid=2059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/712/file0" dev="sda1" ino=16954 res=1
[ 1621.668181][ T2059] FAULT_INJECTION: forcing a failure.
[ 1621.668181][ T2059] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1621.685894][ T2059] CPU: 0 PID: 2059 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1621.694512][ T2059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1621.705532][ T2059] Call Trace:
[ 1621.708859][ T2059]  dump_stack+0x11d/0x181
[ 1621.713201][ T2059]  should_fail.cold+0xa/0x1a
[ 1621.717807][ T2059]  should_fail_alloc_page+0x50/0x60
[ 1621.723077][ T2059]  __alloc_pages_nodemask+0xd2/0x310
[ 1621.728379][ T2059]  alloc_pages_vma+0xc1/0x3a0
[ 1621.733068][ T2059]  new_page+0x10d/0x240
[ 1621.737278][ T2059]  migrate_pages+0x295/0x18e0
[ 1621.741965][ T2059]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1621.746952][ T2059]  do_mbind+0x937/0xa40
[ 1621.751128][ T2059]  ? irq_work_interrupt+0xa/0x20
[ 1621.756122][ T2059]  kernel_mbind+0x111/0x130
[ 1621.760644][ T2059]  __x64_sys_mbind+0x89/0xb0
[ 1621.765259][ T2059]  do_syscall_64+0xcc/0x3a0
[ 1621.769791][ T2059]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1621.775700][ T2059] RIP: 0033:0x45af49
[ 1621.779612][ T2059] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1621.799223][ T2059] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1621.807642][ T2059] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1621.815613][ T2059] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1621.823586][ T2059] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1621.831627][ T2059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1621.839613][ T2059] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:36:03 executing program 5:

05:36:03 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa8000000]})

05:36:03 executing program 0:

05:36:03 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
pipe2(&(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000180)=0x4, 0x4)
getsockopt$inet6_dccp_int(r0, 0x21, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r4)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, r4, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:03 executing program 0:

[ 1622.137257][   T27] audit: type=1804 audit(1578807363.533:1961): pid=2071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/939/file0" dev="sda1" ino=17121 res=1
05:36:03 executing program 5:

05:36:03 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xc8c8c8c8]})

05:36:03 executing program 4 (fault-call:5 fault-nth:16):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1622.637588][   T27] audit: type=1804 audit(1578807364.033:1962): pid=2082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/713/file0" dev="sda1" ino=16937 res=1
[ 1623.046892][ T2089] FAULT_INJECTION: forcing a failure.
[ 1623.046892][ T2089] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1623.083582][ T2089] CPU: 0 PID: 2089 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1623.092314][ T2089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1623.102379][ T2089] Call Trace:
[ 1623.105745][ T2089]  dump_stack+0x11d/0x181
[ 1623.110138][ T2089]  should_fail.cold+0xa/0x1a
[ 1623.114831][ T2089]  should_fail_alloc_page+0x50/0x60
[ 1623.120070][ T2089]  __alloc_pages_nodemask+0xd2/0x310
[ 1623.125460][ T2089]  alloc_pages_vma+0xc1/0x3a0
[ 1623.130160][ T2089]  new_page+0x10d/0x240
[ 1623.134327][ T2089]  migrate_pages+0x295/0x18e0
[ 1623.139016][ T2089]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1623.144164][ T2089]  do_mbind+0x937/0xa40
[ 1623.148340][ T2089]  kernel_mbind+0x111/0x130
[ 1623.152927][ T2089]  __x64_sys_mbind+0x89/0xb0
[ 1623.157550][ T2089]  do_syscall_64+0xcc/0x3a0
[ 1623.162124][ T2089]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1623.168048][ T2089] RIP: 0033:0x45af49
[ 1623.171985][ T2089] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1623.191615][ T2089] RSP: 002b:00007fd94644bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1623.200164][ T2089] RAX: ffffffffffffffda RBX: 00007fd94644bc90 RCX: 000000000045af49
[ 1623.208140][ T2089] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1623.216276][ T2089] RBP: 000000000075c070 R08: 0000000000000400 R09: 0002000000000002
[ 1623.224319][ T2089] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94644c6d4
[ 1623.232410][ T2089] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:36:05 executing program 5:

05:36:05 executing program 0:

05:36:05 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe4000000]})

05:36:05 executing program 1:
syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:05 executing program 4 (fault-call:5 fault-nth:17):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:05 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000280))
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xbab7)
ftruncate(r2, 0x8)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0))
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@rand_addr="dfb607536b2aaebde96385763b4ad582", 0x3, 0x2, 0x4740f50d93bc1ab2, 0x10, 0x6, 0x3}, &(0x7f0000000140)=0x20)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:05 executing program 5:

[ 1623.842854][   T27] audit: type=1804 audit(1578807365.243:1963): pid=2100 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/714/file0" dev="sda1" ino=17201 res=1
05:36:05 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xedaa3032]})

05:36:05 executing program 0:

[ 1624.049433][   T27] audit: type=1804 audit(1578807365.303:1964): pid=2106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/940/file0" dev="sda1" ino=17233 res=1
05:36:05 executing program 5:

05:36:05 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffe00]})

05:36:05 executing program 0:

05:36:05 executing program 5:

[ 1624.739403][ T2100] FAULT_INJECTION: forcing a failure.
[ 1624.739403][ T2100] name fail_page_alloc, interval 1, probability 0, space 0, times 0
05:36:06 executing program 0:

[ 1624.814936][ T2100] CPU: 1 PID: 2100 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1624.823612][ T2100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1624.833703][ T2100] Call Trace:
[ 1624.837140][ T2100]  dump_stack+0x11d/0x181
[ 1624.841492][ T2100]  should_fail.cold+0xa/0x1a
[ 1624.846287][ T2100]  should_fail_alloc_page+0x50/0x60
[ 1624.852049][ T2100]  __alloc_pages_nodemask+0xd2/0x310
[ 1624.857463][ T2100]  alloc_pages_vma+0xc1/0x3a0
[ 1624.862190][ T2100]  new_page+0x10d/0x240
[ 1624.866424][ T2100]  migrate_pages+0x295/0x18e0
[ 1624.871202][ T2100]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1624.876274][ T2100]  do_mbind+0x937/0xa40
[ 1624.880468][ T2100]  kernel_mbind+0x111/0x130
[ 1624.885106][ T2100]  __x64_sys_mbind+0x89/0xb0
[ 1624.889724][ T2100]  do_syscall_64+0xcc/0x3a0
[ 1624.894406][ T2100]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1624.900311][ T2100] RIP: 0033:0x45af49
[ 1624.904277][ T2100] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1624.923890][ T2100] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1624.932308][ T2100] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1624.940288][ T2100] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1624.948306][ T2100] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1624.956283][ T2100] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
05:36:06 executing program 5:

[ 1624.964370][ T2100] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
[ 1626.551042][   T27] audit: type=1804 audit(1578807367.953:1965): pid=2106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/940/file0" dev="sda1" ino=17233 res=1
05:36:08 executing program 5:

05:36:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffff]})

05:36:08 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80000, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:08 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='cgroup.controllers\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8)

05:36:08 executing program 4 (fault-call:5 fault-nth:18):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:08 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
sendmmsg(r9, 0x0, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2)
dup(0xffffffffffffffff)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")

05:36:08 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000280))
ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f0000000100))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}})

[ 1627.104195][   T27] audit: type=1804 audit(1578807368.503:1966): pid=2152 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/941/file0" dev="sda1" ino=16963 res=1
05:36:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r1, 0x701, 0x0, 0x0, {0x6, 0x0, 0xfffffffffffff000}}, 0x14}}, 0x0)

05:36:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]})

05:36:08 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
sendmmsg(r9, 0x0, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2)
dup(0xffffffffffffffff)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")

05:36:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r1, 0x701, 0x0, 0x0, {0x6, 0x0, 0xfffffffffffff000}}, 0x14}}, 0x0)

05:36:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3]})

05:36:09 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
sendmmsg(r9, 0x0, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2)
dup(0xffffffffffffffff)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")

[ 1627.837431][ T2157] FAULT_INJECTION: forcing a failure.
[ 1627.837431][ T2157] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1627.955363][ T2157] CPU: 0 PID: 2157 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1627.963997][ T2157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1627.974058][ T2157] Call Trace:
[ 1627.977406][ T2157]  dump_stack+0x11d/0x181
[ 1627.981895][ T2157]  should_fail.cold+0xa/0x1a
[ 1627.986508][ T2157]  should_fail_alloc_page+0x50/0x60
[ 1627.991726][ T2157]  __alloc_pages_nodemask+0xd2/0x310
[ 1627.997021][ T2157]  alloc_pages_vma+0xc1/0x3a0
[ 1628.001722][ T2157]  new_page+0x10d/0x240
[ 1628.005886][ T2157]  migrate_pages+0x295/0x18e0
[ 1628.010697][ T2157]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1628.015745][ T2157]  do_mbind+0x937/0xa40
[ 1628.019980][ T2157]  kernel_mbind+0x111/0x130
[ 1628.024549][ T2157]  __x64_sys_mbind+0x89/0xb0
[ 1628.029302][ T2157]  do_syscall_64+0xcc/0x3a0
[ 1628.034015][ T2157]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1628.039917][ T2157] RIP: 0033:0x45af49
[ 1628.043874][ T2157] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1628.063599][ T2157] RSP: 002b:00007fd94646cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1628.072070][ T2157] RAX: ffffffffffffffda RBX: 00007fd94646cc90 RCX: 000000000045af49
[ 1628.080067][ T2157] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1628.088091][ T2157] RBP: 000000000075bfc8 R08: 0000000000000400 R09: 0002000000000002
[ 1628.096085][ T2157] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94646d6d4
[ 1628.104129][ T2157] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000004
05:36:10 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
sendmmsg(r9, 0x0, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2)
dup(0xffffffffffffffff)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")

05:36:10 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]})

05:36:10 executing program 4 (fault-call:5 fault-nth:19):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:10 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
sendmmsg(r9, 0x0, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2)
dup(0xffffffffffffffff)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")

05:36:10 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x8c500, 0x0)

05:36:10 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x8, 0x3d, 0xe0}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000005}, 0x0)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2a5863616280d9fb}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r3, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6c65, 0x2}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4800)
fcntl$setstatus(r1, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:10 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xf]})

05:36:10 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
sendmmsg(r9, 0x0, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2)
dup(0xffffffffffffffff)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")

[ 1629.219110][   T27] audit: type=1804 audit(1578807370.603:1967): pid=2213 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/716/file0" dev="sda1" ino=17036 res=1
05:36:10 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x27]})

05:36:10 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
sendmmsg(r9, 0x0, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2)
dup(0xffffffffffffffff)

[ 1629.369354][   T27] audit: type=1804 audit(1578807370.653:1968): pid=2212 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/942/file0" dev="sda1" ino=17037 res=1
05:36:10 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
sendmmsg(r9, 0x0, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2)
dup(0xffffffffffffffff)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")

05:36:11 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
sendmmsg(r9, 0x0, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2)

05:36:11 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x28]})

[ 1629.956621][ T2235] FAULT_INJECTION: forcing a failure.
[ 1629.956621][ T2235] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1630.045999][ T2235] CPU: 0 PID: 2235 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1630.054666][ T2235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1630.065050][ T2235] Call Trace:
[ 1630.068362][ T2235]  dump_stack+0x11d/0x181
[ 1630.072745][ T2235]  should_fail.cold+0xa/0x1a
[ 1630.077533][ T2235]  should_fail_alloc_page+0x50/0x60
[ 1630.083067][ T2235]  __alloc_pages_nodemask+0xd2/0x310
[ 1630.088390][ T2235]  alloc_pages_vma+0xc1/0x3a0
[ 1630.093148][ T2235]  new_page+0x10d/0x240
[ 1630.097395][ T2235]  migrate_pages+0x295/0x18e0
[ 1630.102174][ T2235]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1630.107149][ T2235]  do_mbind+0x937/0xa40
[ 1630.111371][ T2235]  kernel_mbind+0x111/0x130
[ 1630.115902][ T2235]  __x64_sys_mbind+0x89/0xb0
[ 1630.120541][ T2235]  do_syscall_64+0xcc/0x3a0
[ 1630.125064][ T2235]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1630.131037][ T2235] RIP: 0033:0x45af49
[ 1630.134986][ T2235] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1630.154755][ T2235] RSP: 002b:00007fd94644bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1630.163463][ T2235] RAX: ffffffffffffffda RBX: 00007fd94644bc90 RCX: 000000000045af49
[ 1630.171700][ T2235] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1630.179678][ T2235] RBP: 000000000075c070 R08: 0000000000000400 R09: 0002000000000002
[ 1630.187759][ T2235] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94644c6d4
05:36:11 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
sendmmsg(r9, 0x0, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2)
dup(0xffffffffffffffff)

[ 1630.195742][ T2235] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:36:11 executing program 4 (fault-call:5 fault-nth:20):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:11 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
sendmmsg(r9, 0x0, 0x0, 0x0)

[ 1630.676816][   T27] audit: type=1804 audit(1578807372.073:1969): pid=2250 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/717/file0" dev="sda1" ino=17042 res=1
05:36:12 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1630.987158][   T27] audit: type=1804 audit(1578807372.383:1970): pid=2255 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/943/file0" dev="sda1" ino=16990 res=1
[ 1631.244293][ T2250] FAULT_INJECTION: forcing a failure.
[ 1631.244293][ T2250] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1631.306101][ T2250] CPU: 1 PID: 2250 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1631.314821][ T2250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1631.324960][ T2250] Call Trace:
[ 1631.328266][ T2250]  dump_stack+0x11d/0x181
[ 1631.332669][ T2250]  should_fail.cold+0xa/0x1a
[ 1631.337310][ T2250]  should_fail_alloc_page+0x50/0x60
[ 1631.342951][ T2250]  __alloc_pages_nodemask+0xd2/0x310
[ 1631.348242][ T2250]  alloc_pages_vma+0xc1/0x3a0
[ 1631.353159][ T2250]  new_page+0x10d/0x240
[ 1631.357330][ T2250]  migrate_pages+0x295/0x18e0
[ 1631.362015][ T2250]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1631.366981][ T2250]  do_mbind+0x937/0xa40
[ 1631.371148][ T2250]  ? retint_kernel+0x1b/0x1b
[ 1631.375755][ T2250]  kernel_mbind+0x111/0x130
[ 1631.380270][ T2250]  __x64_sys_mbind+0x89/0xb0
[ 1631.384870][ T2250]  do_syscall_64+0xcc/0x3a0
[ 1631.389392][ T2250]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1631.395315][ T2250] RIP: 0033:0x45af49
[ 1631.399315][ T2250] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1631.419102][ T2250] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1631.427530][ T2250] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1631.435533][ T2250] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1631.443717][ T2250] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1631.451804][ T2250] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1631.459824][ T2250] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:36:13 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
sendmmsg(r9, 0x0, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2)

05:36:13 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x29]})

05:36:13 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

05:36:13 executing program 4 (fault-call:5 fault-nth:21):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:13 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
recvmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/188, 0xbc}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000280)=""/73, 0x49}, {&(0x7f0000000300)=""/63, 0x3f}], 0x4, &(0x7f0000000380)=""/41, 0x29}, 0x20)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000400)={0x9}, 0x4)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500)='/dev/zero\x00', 0x2, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000540)=0x2, 0x4)
mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1632.673890][   T27] audit: type=1804 audit(1578807374.063:1971): pid=2268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/718/file0" dev="sda1" ino=17011 res=1
05:36:14 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2a]})

05:36:14 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

05:36:14 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
sendmmsg(r9, 0x0, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2)

05:36:14 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8001, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:14 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2b]})

05:36:14 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)

[ 1633.632535][   T27] audit: type=1804 audit(1578807375.023:1972): pid=2255 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/943/file0" dev="sda1" ino=16990 res=1
[ 1633.665025][ T2268] FAULT_INJECTION: forcing a failure.
[ 1633.665025][ T2268] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1633.698615][ T2268] CPU: 0 PID: 2268 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1633.707249][ T2268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1633.717310][ T2268] Call Trace:
[ 1633.720623][ T2268]  dump_stack+0x11d/0x181
[ 1633.724971][ T2268]  should_fail.cold+0xa/0x1a
[ 1633.729652][ T2268]  should_fail_alloc_page+0x50/0x60
[ 1633.734884][ T2268]  __alloc_pages_nodemask+0xd2/0x310
[ 1633.744491][ T2268]  alloc_pages_vma+0xc1/0x3a0
[ 1633.749215][ T2268]  new_page+0x10d/0x240
[ 1633.753485][ T2268]  migrate_pages+0x295/0x18e0
[ 1633.758184][ T2268]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1633.763148][ T2268]  do_mbind+0x937/0xa40
[ 1633.767369][ T2268]  kernel_mbind+0x111/0x130
[ 1633.771890][ T2268]  __x64_sys_mbind+0x89/0xb0
[ 1633.776857][ T2268]  do_syscall_64+0xcc/0x3a0
[ 1633.781649][ T2268]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1633.787558][ T2268] RIP: 0033:0x45af49
[ 1633.791467][ T2268] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1633.811375][ T2268] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1633.819815][ T2268] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1633.827800][ T2268] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1633.835789][ T2268] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1633.843863][ T2268] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1633.851851][ T2268] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:36:15 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
sendmmsg(r9, 0x0, 0x0, 0x0)

05:36:15 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2c]})

05:36:15 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)

05:36:15 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x207, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x800)
r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe)
lstat(&(0x7f0000000940)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=<r6=>0x0)
keyctl$chown(0x4, r4, r5, r6)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
setuid(r8)
mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x1000000, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other='allow_other'}], [{@smackfsroot={'smackfsroot', 0x3d, 'GPL\'{'}}, {@subj_type={'subj_type', 0x3d, 'md5sumbdev@#)'}}, {@fsuuid={'fsuuid', 0x3d, {[0xc6, 0x6e, 0x62, 0x35, 0x30, 0x61, 0x32, 0x61], 0x2d, [0x65, 0x36, 0x34, 0x37], 0x2d, [0x34, 0x64, 0x6fc70e2e3014003d, 0x67], 0x2d, [0x78, 0x32, 0x39, 0x62], 0x2d, [0x62, 0x61, 0x30, 0x5b, 0x31, 0x37, 0x34, 0xb9]}}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot'}}, {@seclabel='seclabel'}, {@seclabel='seclabel'}, {@euid_lt={'euid<', r8}}, {@permit_directio='permit_directio'}]}})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1634.346139][   T27] audit: type=1804 audit(1578807375.743:1973): pid=2309 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/944/file0" dev="sda1" ino=17055 res=1
05:36:16 executing program 4 (fault-call:5 fault-nth:22):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:16 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2d]})

05:36:16 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)

05:36:16 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

05:36:16 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]})

[ 1634.823656][   T27] audit: type=1804 audit(1578807376.223:1974): pid=2321 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/719/file0" dev="sda1" ino=17078 res=1
[ 1635.444708][ T2321] FAULT_INJECTION: forcing a failure.
[ 1635.444708][ T2321] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1635.470194][ T2321] CPU: 0 PID: 2321 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1635.478844][ T2321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1635.488899][ T2321] Call Trace:
[ 1635.492270][ T2321]  dump_stack+0x11d/0x181
[ 1635.496695][ T2321]  should_fail.cold+0xa/0x1a
[ 1635.501305][ T2321]  should_fail_alloc_page+0x50/0x60
[ 1635.506568][ T2321]  __alloc_pages_nodemask+0xd2/0x310
[ 1635.511914][ T2321]  alloc_pages_vma+0xc1/0x3a0
[ 1635.516605][ T2321]  new_page+0x10d/0x240
[ 1635.520777][ T2321]  migrate_pages+0x295/0x18e0
[ 1635.525467][ T2321]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1635.530419][ T2321]  do_mbind+0x937/0xa40
[ 1635.534684][ T2321]  kernel_mbind+0x111/0x130
[ 1635.539313][ T2321]  __x64_sys_mbind+0x89/0xb0
[ 1635.543923][ T2321]  do_syscall_64+0xcc/0x3a0
[ 1635.548449][ T2321]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1635.554355][ T2321] RIP: 0033:0x45af49
[ 1635.558282][ T2321] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1635.577978][ T2321] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1635.586826][ T2321] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1635.594922][ T2321] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1635.602897][ T2321] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1635.610884][ T2321] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1635.618868][ T2321] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:36:17 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x44001, 0x0)

05:36:17 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)

05:36:17 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2f]})

05:36:17 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)

05:36:17 executing program 4 (fault-call:5 fault-nth:23):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:17 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0xdd018c234dd7723e)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0x1f, 0x18, 0x81, 0xc978, 0xf6, 0x6, &(0x7f00000000c0)="d30a1fa4a818b2657aa854c64cff4254f54194ef6ffa18c6c53f05b3d37195bc20428ba2c62821b051504ce03844f9dcecc32639597309bed18bbb804ca6a718bfd8f1a010c3417510a4d5dc81421b0bb7100171d46e0eff311887cd05326b3f2814730a28d77b9dabc9c26a681d7ab9a900232221fbcafe764bffcb8d7ff380f1f14c2afcff9ff95291ce183b5dd96a204707f70d17cdc6b38bc37c35567ed2975ed3852c9cb9a70719643b86294d2b86f521526be3d1c3e7d9fa48fd5d56188e1e4e222469ac0b916546b12e9faa1aa2b7f419c870db01461df476765a8b437c2ee4294aadaae01633011ff47145ef671b95fb28d6"})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1636.505446][   T27] audit: type=1804 audit(1578807377.903:1975): pid=2349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/945/file0" dev="sda1" ino=17329 res=1
05:36:18 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x30]})

05:36:18 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)

[ 1636.637118][   T27] audit: type=1804 audit(1578807377.903:1976): pid=2348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/720/file0" dev="sda1" ino=17313 res=1
05:36:18 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b000100", @ANYRES16, @ANYBLOB="000826bd7000ffdbdf250f0000003400090008000200020000000800020001800000080002001f00000008000200ffffffff"], 0x3}}, 0x800)

05:36:18 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x31]})

05:36:18 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)

05:36:18 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)

[ 1637.439011][ T2348] FAULT_INJECTION: forcing a failure.
[ 1637.439011][ T2348] name fail_page_alloc, interval 1, probability 0, space 0, times 0
05:36:18 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x32]})

[ 1637.515209][ T2348] CPU: 1 PID: 2348 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1637.523954][ T2348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1637.534032][ T2348] Call Trace:
[ 1637.537348][ T2348]  dump_stack+0x11d/0x181
[ 1637.541705][ T2348]  should_fail.cold+0xa/0x1a
[ 1637.546322][ T2348]  should_fail_alloc_page+0x50/0x60
[ 1637.551591][ T2348]  __alloc_pages_nodemask+0xd2/0x310
[ 1637.557021][ T2348]  alloc_pages_vma+0xc1/0x3a0
[ 1637.561844][ T2348]  new_page+0x10d/0x240
[ 1637.566132][ T2348]  migrate_pages+0x295/0x18e0
[ 1637.570843][ T2348]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1637.575818][ T2348]  do_mbind+0x937/0xa40
[ 1637.580003][ T2348]  kernel_mbind+0x111/0x130
[ 1637.584650][ T2348]  __x64_sys_mbind+0x89/0xb0
[ 1637.589360][ T2348]  do_syscall_64+0xcc/0x3a0
[ 1637.593885][ T2348]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1637.599866][ T2348] RIP: 0033:0x45af49
[ 1637.603883][ T2348] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1637.623585][ T2348] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1637.632017][ T2348] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1637.640016][ T2348] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1637.648039][ T2348] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1637.656129][ T2348] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1637.664113][ T2348] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:36:19 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)

05:36:19 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)

05:36:20 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)

05:36:20 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x33]})

05:36:20 executing program 4 (fault-call:5 fault-nth:24):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:20 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)

05:36:20 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
sysfs$2(0x2, 0xe5, &(0x7f00000002c0)=""/179)
write$apparmor_exec(r0, &(0x7f0000000140)={'stack ', '/dev/snapshot\x00'}, 0x14)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r5, @in={{0x2, 0x4e21, @rand_addr=0x10000}}, 0x3, 0xd445, 0x377c543d, 0xcb0, 0x8, 0x5}, &(0x7f0000000240)=0x9c)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000000c0)="8e664a2b59e6ab2b71807e3706486189928db1054ea26bb9bddeb45db766cb43e29bec7b525fe3270ccbdf9475cde45c0571b404f9c93a7af867b6476b2344a2d7c5b135e51d5c9e0c36ae373f758ae10ec4f43bad0d84f3bd9e10feb19bef2299fbffd8f2c6b9dc23a4b302811110e884c5e0ea073018bc981d83c6a9ba")

05:36:20 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)

05:36:20 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x34]})

05:36:21 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = gettid()
tkill(r0, 0x15)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x9, 0xfc, 0x0, 0x7fff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xaa}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000280))
r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r4)
ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000100))
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:21 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:21 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0xfffffffffffffedd)

[ 1639.715143][   T27] audit: type=1804 audit(1578807381.113:1977): pid=2411 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/946/file0" dev="sda1" ino=17505 res=1
[ 1639.744966][ T2411] sctp: [Deprecated]: syz-executor.1 (pid 2411) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1639.744966][ T2411] Use struct sctp_sack_info instead
05:36:21 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x35]})

[ 1639.914393][   T27] audit: type=1804 audit(1578807381.203:1978): pid=2412 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/721/file0" dev="sda1" ino=17489 res=1
05:36:21 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)

05:36:21 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:21 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x36]})

[ 1640.287768][ T2434] FAULT_INJECTION: forcing a failure.
[ 1640.287768][ T2434] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1640.362156][ T2434] CPU: 1 PID: 2434 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1640.370966][ T2434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1640.381046][ T2434] Call Trace:
[ 1640.384353][ T2434]  dump_stack+0x11d/0x181
[ 1640.388740][ T2434]  should_fail.cold+0xa/0x1a
[ 1640.393363][ T2434]  should_fail_alloc_page+0x50/0x60
[ 1640.398998][ T2434]  __alloc_pages_nodemask+0xd2/0x310
[ 1640.404372][ T2434]  alloc_pages_vma+0xc1/0x3a0
[ 1640.409144][ T2434]  new_page+0x10d/0x240
[ 1640.413530][ T2434]  migrate_pages+0x295/0x18e0
[ 1640.418238][ T2434]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1640.423214][ T2434]  do_mbind+0x937/0xa40
[ 1640.427593][ T2434]  kernel_mbind+0x111/0x130
[ 1640.432108][ T2434]  __x64_sys_mbind+0x89/0xb0
[ 1640.436708][ T2434]  do_syscall_64+0xcc/0x3a0
[ 1640.441283][ T2434]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1640.447353][ T2434] RIP: 0033:0x45af49
[ 1640.451398][ T2434] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1640.471293][ T2434] RSP: 002b:00007fd94644bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1640.479735][ T2434] RAX: ffffffffffffffda RBX: 00007fd94644bc90 RCX: 000000000045af49
[ 1640.487028][ T2417] sctp: [Deprecated]: syz-executor.1 (pid 2417) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1640.487028][ T2417] Use struct sctp_sack_info instead
[ 1640.487772][ T2434] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1640.487795][ T2434] RBP: 000000000075c070 R08: 0000000000000400 R09: 0002000000000002
[ 1640.520381][ T2434] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94644c6d4
[ 1640.528372][ T2434] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:36:22 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:22 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x37]})

05:36:22 executing program 4 (fault-call:5 fault-nth:25):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:22 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)

05:36:22 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x38]})

[ 1641.134591][   T27] audit: type=1804 audit(1578807382.533:1979): pid=2457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/722/file0" dev="sda1" ino=17489 res=1
[ 1641.361653][ T2457] FAULT_INJECTION: forcing a failure.
[ 1641.361653][ T2457] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1641.375493][ T2457] CPU: 0 PID: 2457 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1641.384258][ T2457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1641.394326][ T2457] Call Trace:
[ 1641.397765][ T2457]  dump_stack+0x11d/0x181
[ 1641.402108][ T2457]  should_fail.cold+0xa/0x1a
[ 1641.406836][ T2457]  should_fail_alloc_page+0x50/0x60
[ 1641.412124][ T2457]  __alloc_pages_nodemask+0xd2/0x310
[ 1641.417757][ T2457]  alloc_pages_vma+0xc1/0x3a0
[ 1641.422444][ T2457]  new_page+0x10d/0x240
[ 1641.426598][ T2457]  migrate_pages+0x295/0x18e0
[ 1641.431280][ T2457]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1641.436229][ T2457]  do_mbind+0x937/0xa40
[ 1641.440404][ T2457]  kernel_mbind+0x111/0x130
[ 1641.444922][ T2457]  __x64_sys_mbind+0x89/0xb0
[ 1641.449535][ T2457]  do_syscall_64+0xcc/0x3a0
[ 1641.454040][ T2457]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1641.459925][ T2457] RIP: 0033:0x45af49
[ 1641.463937][ T2457] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1641.483612][ T2457] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1641.492030][ T2457] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1641.499996][ T2457] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1641.507965][ T2457] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1641.516103][ T2457] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1641.524112][ T2457] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:36:24 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0xffffffffffffffb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:24 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000280))
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x7, 0x3, 0xfe, 0x98434b2f7d2277d0, 0xf3}, &(0x7f0000000200)=0x20)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000280))
setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, &(0x7f0000000240)="4fcc39cb2caf0c1bcc7c56d8c8063440f7c07366554e57d4162b98c45ad19b756999c8b60e", 0x25)
r6 = openat(r3, &(0x7f00000001c0)='./file0\x00', 0x210000, 0x0)
write$P9_RSYMLINK(r6, &(0x7f0000000140)={0x14, 0x11, 0x1, {0x80, 0x1, 0x4}}, 0x14)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r7)
setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000100), 0x4)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f00000000c0)="ecd128a2d167f2b40ffb4798e0d6c168", 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:24 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)

05:36:24 executing program 4 (fault-call:5 fault-nth:26):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:24 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x39]})

05:36:24 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

[ 1642.812798][   T27] audit: type=1804 audit(1578807384.213:1980): pid=2472 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/947/file0" dev="sda1" ino=17606 res=1
05:36:24 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:24 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3a]})

05:36:24 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x0)

[ 1642.967624][   T27] audit: type=1804 audit(1578807384.253:1981): pid=2474 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/723/file0" dev="sda1" ino=17607 res=1
05:36:24 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r8 = dup2(r7, r7)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:24 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:24 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3b]})

[ 1643.588219][ T2479] FAULT_INJECTION: forcing a failure.
[ 1643.588219][ T2479] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1643.651636][ T2479] CPU: 0 PID: 2479 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1643.660398][ T2479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1643.670461][ T2479] Call Trace:
[ 1643.673765][ T2479]  dump_stack+0x11d/0x181
[ 1643.678121][ T2479]  ? __sanitizer_cov_trace_pc+0x1/0x50
[ 1643.683653][ T2479]  should_fail.cold+0xa/0x1a
[ 1643.688300][ T2479]  should_fail_alloc_page+0x50/0x60
[ 1643.693555][ T2479]  __alloc_pages_nodemask+0xd2/0x310
[ 1643.698888][ T2479]  alloc_pages_vma+0xc1/0x3a0
[ 1643.703700][ T2479]  new_page+0x10d/0x240
[ 1643.707875][ T2479]  migrate_pages+0x295/0x18e0
[ 1643.712567][ T2479]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1643.717560][ T2479]  do_mbind+0x937/0xa40
[ 1643.721846][ T2479]  kernel_mbind+0x111/0x130
[ 1643.726447][ T2479]  __x64_sys_mbind+0x89/0xb0
[ 1643.731079][ T2479]  do_syscall_64+0xcc/0x3a0
[ 1643.735597][ T2479]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1643.741637][ T2479] RIP: 0033:0x45af49
[ 1643.745591][ T2479] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1643.765208][ T2479] RSP: 002b:00007fd94646cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1643.773659][ T2479] RAX: ffffffffffffffda RBX: 00007fd94646cc90 RCX: 000000000045af49
[ 1643.781654][ T2479] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1643.789626][ T2479] RBP: 000000000075bfc8 R08: 0000000000000400 R09: 0002000000000002
[ 1643.797650][ T2479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94646d6d4
[ 1643.805717][ T2479] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:36:25 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:25 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
dup2(r7, r7)

05:36:25 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3c]})

05:36:25 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x2800, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1)
ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f00000000c0)={{0x0, @name="5759499ad1f0a349abde9ba1d028080c297e61027052df5d3f845288040e9090"}, "e2a80cf39cf856ce36e4ece22b0787f88c031d1f9fbd601faed333c7b3888a75", 0x3})
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000200)={0x2, 0x4, 0x7fffffff})
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:25 executing program 4 (fault-call:5 fault-nth:27):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:25 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000280))
r4 = accept4$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10, 0xc00)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0xfe4d)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r7}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={<r8=>r7, @in6={{0xa, 0x4e20, 0xffff8001, @dev={0xfe, 0x80, [], 0x25}, 0x5}}}, &(0x7f0000000200)=0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x20, 0x80, 0x8, 0x401, 0xffff6781, r8}, 0x20)

05:36:25 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
dup2(r5, 0xffffffffffffffff)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r7 = dup2(r6, r6)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:25 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)

[ 1644.285651][   T27] audit: type=1804 audit(1578807385.683:1982): pid=2520 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/948/file0" dev="sda1" ino=17605 res=1
05:36:25 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3d]})

[ 1644.524047][   T27] audit: type=1804 audit(1578807385.683:1983): pid=2524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/724/file0" dev="sda1" ino=17042 res=1
05:36:26 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:26 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, r5)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:26 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3e]})

05:36:26 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:26 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, r5)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:26 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x41]})

[ 1645.343660][ T2524] FAULT_INJECTION: forcing a failure.
[ 1645.343660][ T2524] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1645.468955][ T2524] CPU: 0 PID: 2524 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1645.477592][ T2524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1645.487665][ T2524] Call Trace:
[ 1645.490970][ T2524]  dump_stack+0x11d/0x181
[ 1645.495323][ T2524]  should_fail.cold+0xa/0x1a
[ 1645.499940][ T2524]  should_fail_alloc_page+0x50/0x60
[ 1645.505167][ T2524]  __alloc_pages_nodemask+0xd2/0x310
[ 1645.510645][ T2524]  alloc_pages_vma+0xc1/0x3a0
[ 1645.515422][ T2524]  new_page+0x10d/0x240
[ 1645.519658][ T2524]  migrate_pages+0x295/0x18e0
[ 1645.524371][ T2524]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1645.529384][ T2524]  do_mbind+0x937/0xa40
[ 1645.533645][ T2524]  kernel_mbind+0x111/0x130
[ 1645.538266][ T2524]  __x64_sys_mbind+0x89/0xb0
[ 1645.542895][ T2524]  do_syscall_64+0xcc/0x3a0
[ 1645.547532][ T2524]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1645.553456][ T2524] RIP: 0033:0x45af49
[ 1645.557366][ T2524] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1645.577143][ T2524] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1645.585566][ T2524] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1645.593548][ T2524] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1645.601532][ T2524] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1645.609548][ T2524] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1645.617539][ T2524] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:36:28 executing program 1:
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000000c0)="ee965d48d04a206dfef3a30ec094423d9fab52b55c9fa5416af8a18c68e349e0ffc6c63ac7966dca774ad2539cbf062ee1e88842e15a6165f262e0ac5cde1f8109e6eebe2da869961e5e2595c5d51444f0af06ac8817d14f76fddc", 0x5b}, {&(0x7f00000002c0)="a4d96b635abae25c1224366cef12c7f51f3867500cab1ec216213c081a7f0a1b76170510d6fd5f602a45c0ff3e9b3b0b3354630d803d22d2f130e56ba5d8a41df957a8aaf2506ccc1f1d6ba671246e464e882a8bd753606f09ad25b77b3fbd32fb86b056375496b5606c8242df1d912de246bc49501d42fdf5f635b1a4e40339458224cf461b3787493a02ebbf4747e7fd816eb72cdff3cec1ebc39228fde067013c28c81af686bc36ebb2906ffe304b6f8e9b6fb66f491666db27fab9498564355656d175cd78756dd7506a6859d6f6af0ff8443a51167d5ca1bd15ef85e1c06dd3064daaa68ec63d46ec5b9023c18cc490e5ff6aa98c3a8135b8fe9d74a067e84534fdcd642914f26d8b6b6cf4b0404e5133450e909bff4fd6d116f5e69e08a8b6ba916b8c4ed54e2723b52f4e459f82e6d63cfa7e2293b292185bd60cbb99cfe39165c4a5ff9dae3f7d523bdb00455c7e6a9c41376ccff0900227b98cc10a2717f72e2ecd21682e03d75130ab8c35ee640ef256be5a7a795a4bcc9a705382d81394383d9704f85fae01016322efc5d3cef81cfed8b3b379f9c0e48bb3270ed7897585ee8a3ab74a296a94b35db7a8d4656e5f31b7ca32e93be6495c650c3392670482f6aa8b9757aa5acab985fd3bc8872ce2bb6d04332931a0ffde10568e284e94b0b12f9edeb28c1ed86fa1fd3d886507b7efeaf354e279a0de160cb51ce8b22642483bf3aca780295c0c5e09e3a487f087b22904ce565c652cf8d5d7fa214e17fa80d52709c9c720a36991a6a536899e42d34de6af3a408904628c2d64218cccc4fa28278c2ad0f13ef09ce1cfdebf9398124cbcd1ec243d5aef9e4fa51ec8e1c55724937ef326fdf2398081e0438e6703da4d8f378a6a0bf2d03bc6024df375e5efb61f85c03a5a8968d57b87d73b2114765f6af5294419a7d9073fe91d7b78ea6c6aa5d2d0e59f3109fafa769702154dd84ff943646fe0e5d47090b22e84bba5b3c86c2b9e6c7dc566ed92ef7a4fb0559f38a8818e8c5cffafbdbe42beed5673fdf3f54d6e2b1d5f4725f7540f9605c090a4fd5fca761f46d65008ff7ab12d22ae76a72940950a10dd465724ab8422dcb292515a88cf7ae2a692c33e39fb5966542b9e72a6a7c7cd86cecb87091992524b975283aa87dd0f294a5113793dd749e8621323f5279b1a272319f2f5068b366e8662a8c1e3cf8eb39103c91513bd60fd3b61ae3e7790a94ea0df9ef6510def56f223e354c53cf2d9d8892a97fd1fd38f2823dd5fae203b4115da48e9232f6f64114ad217d8953196236f4a6b68a1e5b975fc1835a7975582da4c9c678717b921d83a9563d30c59becb05228e8f31441afab728463cc1119060a57e173c7612640e43e586ea391735ba706a020e87eeeca331072f8f8dbf229f839210b609544bb0a66f472f10a9136f34cfde851cf34bca5c4789340ad2a48df8dc64e8105fd978a8916526de6675ea7aea8baf0618873e29a804e39a3467a3ce8cc665de14d4595fc7a346a7a6dedc5cf4d59dca4481ea750510c95f4cb12688da7981f5c734dcb7f69d9606b226dc4001a41b49d47161330a29ea3fdcedbc75a751059a708a010ab70ba4a4887e259a00ec0d4b8ec57dfbedab7569a6847f7dbfb43640f32076d85d1de9b283c86f7afcd4b5e82a978b9d74a2091786cd77f24d0aff01b3327647e93c720187f4d27f6b64494d6edeb5572dbc61c546da40ac48b0f6920b91a9324193522e914c5663f2728c2265c883930320e074a1edb14247a62323fd4d57995a4c493666c76288a00d88a176bff0837754e66119a30ee5ccd1f3d2f542440ec0b76a19df4234402660208ec42846a447fde3ec455408d9f5393c05a6512fbfb73460e349f126e58d791dd8dc08c9a6cef3c1a6eeccd6316b8ada5e5ae97f49407b2f0f359cba25038ca6a4a33ddb06f78ba7a6e3f97e01eb85c6f8fb66c3bbbbd9a3cde66fb0fbaea3ab6cef9c2873b15fd3722a574aada4197f5f97251701a674888592f1d693f7fd8c7f29553399ce85b903d9a7e1616f0260ec56b1f9345f587297ca17d0410860c860feef93248560cd1c5027d37075bd7238a3610299acf3f9539e1e636a4346d0c92234b48791efb48e70a6279f4c16a2fc86771255abdcb5110ac45dfcadb04709dd734a6fce02e49fb94014fef0272542c24ef985e74a60401fe5a830745b0238eceffa6d55fd787ba93fe8b35763d732f3d36b2b2a3136fb21ffc472db04c12af24a8236ef47c22005e974b8f6448272248daf38edfd046ab95d01a50ff1a7cea92545c6d2748602b3c294978aeb9d067e1ce66c6b1d6a0d1bcd74688c9b8cdf7f39906bc09f73d735893e3cc11481c04048fbf017f8067a5006b33e8242e4c3e1819b1c116fd3d536b97ab00c78f253b3050d2936648b6c2ab6e7e2068a4b355eb8e4035d4a984e85868c78930efb38ea00f94b302904559a75c1d35c830901fd205def45215ca0d71e9c231f7987c3e9990c12a57aa13756df21237402fecc93121587f8b4f33cdf81b7aa07adb1fa3b53ba33ac41036b938bbf7f633975942178a627424810a61a5f91f1e06aee0ec996213c01a72b0ac800a3da25e4853dfb76676f4b0aa5d8e8d3410b19ff27be7849e3dd83387d29e7677214c67fe5f8311410268cd45e1e0dc743cd7703c39c11ee33067e3c8d6545e803baf8ab7a622ec4c02d6a4e09af6124a769a2c9a03230aef847a02182bdc95b6fcbb5dfed5dc80aefc9e4d89ef44626381fc95ca03fac60cbdb98417f0871f0df7d3db31c96908e0b04b5de0b6e66a8b7d368cc82469c2174a0dd01187ebe35813b1b3e7aebd41373abaa049c2eace52366eddbe3a02615210463cda6ef91adb19321abf8b0191d32db985f7e7bde37409026d5ef557d8d4774df6b4cbd54afc3c00bcf0dafeacf784094795d539266fb353cd67219f52311531a3b9cafc57ecad438b03311427e1db32bb5359bb0f09feff0c7e00cb40ecc124b011cb09d45cfefbc61080432c3b9b2df67d73669fb65623cebc1a8472b9af871ed147e03b6f7b8287a3baf8b0b5c8803f7b837a52d9b5a1ecfde6d359aefeb5fa1492bae2696826d63f4927db3e5e78f634187a63e14650f385111ea7743ddc7e942585248cc4710702b4a64f1279d4f1e4433cb05876969dbb99ab277fa76221fec273cda11446ef4ac02802c8d343f50d94d07fc7243509dfebb34d0048ba3b17eec356023a5a8d29ec422c132337337a2dda80c5ebd0b14feacb52646693f23cba832c61a461b710a4d0d6291a5bf78b9d143e02857ce0607f8afe31aa86a98cff7c9543a57b845d770395313567477db74cd62a1e94ebf741daa4f90c22dcded8c7bd11414f2ef94731fca96c4c63e3dfb3155f0d69d6d5c4357edf765f3e3d26bc2297bc99bb27fe320ee52dc4081942fde94a8d82216880446ad475d302f0180374808c13fa40cd9e49d093bf5047932fef032b08295226cdc619168200d8c29ee1853dae4f5318325fb9ed0b12607501f9615434ad30d3c3998f7a5dadd83891bcfc07f14e33de85e72a465c52bcf4e4be344b30e0f27dcb079742e56c20da3a976c728223dfbc7c52399e96441a5c5126d7fed0249114b25ed9dca74f34014cd88899c7028aa8f3ac02bfc484a923251e99982139eb8a76f81026ea6d7f67807c51c439548f1dc0c238ec5ac06c77bddecba28339be6fe855b5777241b666d227ef5c294476f8e3adc2a2822ac49cbc4bb623ae9e1441101663e762f13fb91abf515fba6ab1c4613cf2e8bdf503765d1bd5eb79f0dcb750732416c18dd305aada869e1885628cb836460731266cab170d738f9881fb0c1e8b0af543d12b41677cee0ee118a99542f951371d0f844f624547b90c5a69e79aec0f40fbdc6a40b07174e3ebd858399479521fa9d921428b7b72adf4ff35173824e5d03060e577d74e166b21602a2a490956103919749b4e2bddbd761734fe63e080061d2a799f80ddeb5905e2d93753d4d8bede8b9260c1a55f2f2772ac25c0635374d1b3471cf0c622e0877c0a039d3fcb642be8024fe7479086ce1940325ac10ae31762af3fddc019262fad26008bfb88fcbaec7f90e79803c01d693f325b581466a4ced547b92de027dabf42e5273920bfdeee9e43f72d34ce302ada3cc292d789824ae4800b90c1517fd777e05c81a89b6e3f451fdbc4e92b7a0fd73d21a13268e41fff2468385eb2be81d93d08b7f7476927b0ee66b68a57d5b6dcef14127fb0754a363061f9f1d17424589be67009c349052f582a0afef7055468aca468ff251299e134c71bf7969835bcc35108b8a53087f41556ea692e947386e7e0521fe81111ec037cd3597c0cd92f775e2dcd8b287daf8b98e2222ff646b6acd0e34f366ca6c4242dbdbd507d6b51221cfaa9bfc79ea82bdb351153c179e9c50b2482b0c04cc23cd743ca12aaadd5bc84946f913731cef056b5cee94ac0b1e86f65d8204beeedbc797031dad2a80232ee5e07d8eb5de1fa5652c61161b639b9ed47600b2d4e461eb048f17e22bf489afefb8f3249fec2a26ed743449b3e37503602091add24a61737cb21127fe108baeaf443c493a8acbb602e6bfd40c2d2e9436caf5a4898e0db9dc80644b2878b3e1c16fb2db588b0835c47e57bd250dbb90f1a86db412c1aca22b099078c77d110d2ea70305b8f4508424aab90289331cb5e5c0e0c766bd96b9244e95a373e18d9e141993cf7a5514e58b48c55d666b0ba535d6ec96782be5ffd1dd60df85e804b1622f2f90f9df95f9f905ba24fa2728956f2daea10bd068f79f19032c3eb9432de6144cbca44e81058b5014029ef9c399d14aa7ccba0d15fde420ec4cc140815bd3824a6bbde4fbf61c89f594d7ecdd29631d2d99c327ae2c079334d8d6bc9c6e9b8ab8bf32f9e2d6650cfcf9762f1a36c09eea6a4f92e906277fd72e1b13ec35bbf0eb3f75cb59dbf4b9b3e7baf135402ff6af89368e065e9504636ac83b80a22742c7e48e6ecd7f8d296466f9cb45dd0f3908d78aa08cc241d9965434a31284aa7a5e51a863bf68f1bdc131763a4f2b2155354405aa3bd3090fd5a21f1c04a8355a36724374a40121c9cbf01042d2cfc50f20e772dd5b3485a95f07a3f02a72a6d10b7ce86eae85afc04eb52610b24b415580592e0c2b06b9736e3d7fc75c3921fa81b7204c26d79e31024a64ad38484fe5965dda65854e3b2311e195956fa576a9fd2ea6b2c7a41f062051b82b0d8f90c6e814d7ff26d6d1f190cb49ea0eacd4fe1aa78446e4617d1dd04b77730c4fb7c697bd8c56c757120737a6d6d1f8637cbab15e873f9854631513833a399ae2923ef4a92e5192f0de1166de68dd1f1b21ad85646856346b8af61b7fce63d9541827f59cc9ef59d10fa40b8f5b837b3595035ea8c3b4c6793675234937aaa673a43c28319b0ad73c1a02e4c04101e8fe705e9e70cfd1613dbac8e4e1cf4db13a722bfec000502e80828514f469c424933e78ea78737b121fb2dc6784155e811b1b13861d3e9410da8f40391533371de0f2445a384e7e914fb17275f7719c7c42f901c2e774b7054a2533d4762bf24b4c62e2b410b2ef4b11970080774da03aa47b623f755a8cb1988180e6a639bcdd6fbebf56e2f46cf920db8b168af372807eda83a02577ed3d837b80490e05baa1f36303833c0b0d5c52a8260ad5a0996bc9ae23866c6b9c3c7c744f62d5c3bb956d65dda9b18d2947af79d4a63ecb460783384e46488c16833cffbecff23b", 0x1000}, {&(0x7f0000000140)="dfd1e72895acc6bfde0b9d81bf75b93cd4806dae3aacbbedf90da43e5d24df62638f7b9dfcf5e6cbf5ceea9fb1774218f420e7d4ffd52ff7411d33ad1d4fefd87d3a0f8c2eced0bba9e6ec0dc0aea133cd474f7419003d54f948319b2727e22c967a652f81fdfd01975171af4f82633f3528885f", 0x74}, {&(0x7f00000001c0)="9b5f861494147545b29c3074055c19b92614f124e5b9fec1115b82ca27ed0d23d0bbf70823687713e07686df28e409126159cf360cb6ec081fc43f1984ef1f73b2934ac9965150aba1785b3ac1729ec4dbb4", 0x52}, {&(0x7f00000012c0)="bb3d03f0d8f9605ea2915c9775b9089f6b0f3fe273ab512d1e32405c8395a11a01d04b25334ef280b1b4ff18a1099ff029d9f3db8252f6cb8e70770059cf0a476548bb893b768e737e5c03d8c615b17353b7d935f685def4eed2011e030d90de78f70772a15739aaee8ee5c5dd5bad537cd19263c57984502b3340b9ed5d9c0111f6a4070072d7d97c889fdf60b57647903be437362bef1229e07974c91c926946ce9a8668beab013a583918047c", 0xae}], 0x5, &(0x7f0000000240)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffb}}], 0x30}}, {{&(0x7f0000001400)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000001440)="81e9932ff4fda41ebcf4e3a1a192e56944d3ccfa631f786802806f242408", 0x1e}, {&(0x7f0000001480)="ce92a5a23a43ae7877e9ea0e89f4f7a1078966d38d0a124deda3f498f5315540a6b4ba45b321abb9d0cac2dc6a3bdbd6df40", 0x32}, {&(0x7f00000014c0)="30e6edabd4dba4b7939362a957cd5e22786eb8cbf3f381a3dd0f01063b1e8cbeb39a81dbafacffd0eb520dbf8188587df249902b4f756e65e254990d646c4f4a09c7d3363d5e99839a78998455cab20cc21166ae703f78bd4fd86de36b83d9e79a6d8542477deafd3735bd4a77b8b7a4da2abee5ce73816e5bef8d2631fe16e45ca7f621242fe7ee1b", 0x89}, {&(0x7f0000001580)="5176f485a8982d603c082997f18534d19e2df1ed282043264543229837a63c4b115f47d8bb143ee154261edfbea34563152aa9592c251cbaf67af3134235eca7120223ec7f5cf1541bcfaa399c55b077802fd6163f9fc8319efedc326faef56219e5e89db5f72070be5eeba11999cd53872a4125db05b5cc3123911276f1c7dfff0449fe0e1f06605d68256d4de5e30e4acf2899e4ea0c7da6a8714d52994d05f71418ed1c552cdd722465076f56614ca1f533aaab107cd187d20a1080e424e43398bb41cbbb7bd34ede683973c3518c5fd81da8d75081deafca0e8204b520286da6fa685b19c9891b0e939c718aed967f6e3e95", 0xf4}, {&(0x7f0000001680)="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", 0xfc}], 0x5, &(0x7f0000001800)=[@hoplimit={{0x14}}], 0x18}}, {{&(0x7f0000001840)={0xa, 0x4e20, 0x7653, @dev={0xfe, 0x80, [], 0x2c}, 0x3}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000001880)="0cdb1cea880a23b28a3b833cad92e7b59f06e6e85bb2873b354be7f060f0a330cf9d1259d9", 0x25}, {&(0x7f00000018c0)="61aacac22bd78c9e9fd52ba4de016144fc5188a285b9ea12c7f2e9bee370357e547110dec18a160498514fba8e214bf3e8cfbb70a590e45e68fd649ce6a97be6f819394c74654b3f0a05ff978b2cd5540c5f52f11261e6f9ac6863d896fd4fa21e5866bc45", 0x65}, {&(0x7f0000001940)="bc58f833a58b04490b108d00f4", 0xd}], 0x3, &(0x7f00000019c0)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts={{0x30, 0x29, 0x36, {0x67, 0x2, [], [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @ra={0x5, 0x2, 0xa5}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x60}}], 0x3, 0x40)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:28 executing program 4 (fault-call:5 fault-nth:28):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1647.232320][   T27] audit: type=1804 audit(1578807388.633:1984): pid=2576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/725/file0" dev="sda1" ino=17091 res=1
[ 1647.298310][   T27] audit: type=1804 audit(1578807388.693:1985): pid=2578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/949/file0" dev="sda1" ino=17122 res=1
05:36:28 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
dup2(r3, 0xffffffffffffffff)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r5 = dup2(r4, r4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:28 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:28 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x42]})

05:36:28 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0xa00)
fcntl$setstatus(r1, 0x4, 0x2000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1647.604480][ T2576] FAULT_INJECTION: forcing a failure.
[ 1647.604480][ T2576] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1647.687424][ T2576] CPU: 0 PID: 2576 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1647.696106][ T2576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1647.706170][ T2576] Call Trace:
[ 1647.709493][ T2576]  dump_stack+0x11d/0x181
[ 1647.713842][ T2576]  should_fail.cold+0xa/0x1a
[ 1647.718442][ T2576]  should_fail_alloc_page+0x50/0x60
[ 1647.723655][ T2576]  __alloc_pages_nodemask+0xd2/0x310
[ 1647.728966][ T2576]  alloc_pages_vma+0xc1/0x3a0
[ 1647.733657][ T2576]  new_page+0x10d/0x240
[ 1647.737846][ T2576]  migrate_pages+0x295/0x18e0
[ 1647.742571][ T2576]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1647.747539][ T2576]  do_mbind+0x937/0xa40
[ 1647.751740][ T2576]  ? irq_work_interrupt+0xa/0x20
[ 1647.756785][ T2576]  kernel_mbind+0x111/0x130
[ 1647.761330][ T2576]  __x64_sys_mbind+0x89/0xb0
[ 1647.765961][ T2576]  do_syscall_64+0xcc/0x3a0
[ 1647.770493][ T2576]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1647.776400][ T2576] RIP: 0033:0x45af49
05:36:29 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, r3)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

[ 1647.780442][ T2576] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1647.800154][ T2576] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1647.809195][ T2576] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1647.817242][ T2576] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1647.825233][ T2576] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
05:36:29 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
dup2(r5, 0xffffffffffffffff)

05:36:29 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x43]})

[ 1647.833224][ T2576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1647.841260][ T2576] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:36:29 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, r3)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:29 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)

05:36:29 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x44]})

[ 1649.977362][   T27] audit: type=1804 audit(1578807391.373:1986): pid=2578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/949/file0" dev="sda1" ino=17122 res=1
05:36:31 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:31 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
dup2(r1, r1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r3 = dup2(r2, r2)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:31 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x45]})

05:36:31 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x4000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

05:36:31 executing program 4 (fault-call:5 fault-nth:29):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1650.295611][   T27] audit: type=1804 audit(1578807391.693:1987): pid=2627 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/726/file0" dev="sda1" ino=17629 res=1
[ 1650.497186][   T27] audit: type=1804 audit(1578807391.743:1988): pid=2630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/950/file0" dev="sda1" ino=17633 res=1
[ 1650.825125][   T27] audit: type=1804 audit(1578807392.223:1989): pid=2630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/950/file0" dev="sda1" ino=17633 res=1
[ 1650.931960][ T2627] FAULT_INJECTION: forcing a failure.
[ 1650.931960][ T2627] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1650.999760][ T2627] CPU: 0 PID: 2627 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1651.008417][ T2627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1651.018481][ T2627] Call Trace:
[ 1651.021807][ T2627]  dump_stack+0x11d/0x181
[ 1651.026270][ T2627]  should_fail.cold+0xa/0x1a
[ 1651.030889][ T2627]  should_fail_alloc_page+0x50/0x60
[ 1651.036112][ T2627]  __alloc_pages_nodemask+0xd2/0x310
[ 1651.041450][ T2627]  alloc_pages_vma+0xc1/0x3a0
[ 1651.046151][ T2627]  new_page+0x10d/0x240
[ 1651.050322][ T2627]  migrate_pages+0x295/0x18e0
[ 1651.055011][ T2627]  ? alloc_pages_vma+0x3a0/0x3a0
[ 1651.059966][ T2627]  do_mbind+0x937/0xa40
[ 1651.064173][ T2627]  kernel_mbind+0x111/0x130
[ 1651.068689][ T2627]  __x64_sys_mbind+0x89/0xb0
[ 1651.073311][ T2627]  do_syscall_64+0xcc/0x3a0
[ 1651.077842][ T2627]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1651.083733][ T2627] RIP: 0033:0x45af49
[ 1651.087846][ T2627] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1651.108685][ T2627] RSP: 002b:00007fd94648dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1651.117225][ T2627] RAX: ffffffffffffffda RBX: 00007fd94648dc90 RCX: 000000000045af49
[ 1651.125378][ T2627] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
[ 1651.133533][ T2627] RBP: 000000000075bf20 R08: 0000000000000400 R09: 0002000000000002
[ 1651.141504][ T2627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd94648e6d4
[ 1651.150327][ T2627] R13: 00000000004c8340 R14: 00000000004e03f8 R15: 0000000000000006
05:36:32 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:32 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x46]})

05:36:32 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
dup2(r3, 0xffffffffffffffff)

05:36:32 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
getsockopt$rose(r2, 0x104, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:32 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0xc8749ffc4a471948, 0x0)

05:36:32 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:33 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x47]})

[ 1651.616833][   T27] audit: type=1804 audit(1578807393.013:1990): pid=2648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/951/file0" dev="sda1" ino=17635 res=1
05:36:33 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:33 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
dup2(r3, 0xffffffffffffffff)

[ 1651.745382][   T27] audit: type=1804 audit(1578807393.043:1991): pid=2646 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/727/file0" dev="sda1" ino=17637 res=1
05:36:33 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x48]})

05:36:33 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)

05:36:33 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:33 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:33 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:33 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x49]})

05:36:35 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:35 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4a]})

05:36:35 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:35 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:35 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000280))
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000001480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000001440)={&(0x7f0000000580)=ANY=[@ANYBLOB="3f10fb0279d80300", @ANYBLOB="edd0034a93e1e08093580e904e8ef02b690ad0481cd96d6871264f481edf3877f5a7b3f211aa552198834a1f9656b8cfdfd5a9308f02f2c9a1c0a587d7f12db91b5804", @ANYBLOB="00042cbd7000f8dbdf25170000000c0099000100000010000000"], 0x3}, 0x1, 0x0, 0x0, 0x8}, 0x82)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x130)
write$apparmor_exec(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='exww \\'], 0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000280))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000180)={0x0, <r6=>0x0})
r7 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0c2c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7e285726, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r6, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r7, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x400, 0x0)
ioctl$KVM_SET_FPU(r8, 0x41a0ae8d, &(0x7f0000000300)={[], 0x9, 0x6, 0x9, 0x0, 0x6, 0x10000, 0x6000, [], 0x5ded7c60})
r9 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x280200, 0x100)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r9, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffe000/0x1000)=nil)
ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000500))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4f4103, 0x0)

05:36:35 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:35 executing program 3:
syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x5, 0x200000)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = open(0x0, 0x0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000600)=0x80000000)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc480}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xc8, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x59}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x76}, 0x1, 0x0, 0x0, 0x800}, 0x1)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mount$9p_tcp(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x6010, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@noextend='noextend'}, {@noextend='noextend'}, {@afid={'afid', 0x3d, 0x6}}, {@debug={'debug', 0x3d, 0x1}}, {@version_9p2000='version=9p2000'}, {@version_9p2000='version=9p2000'}, {@version_L='version=9p2000.L'}, {@posixacl='posixacl'}, {@loose='loose'}], [{@permit_directio='permit_directio'}, {@appraise_type='appraise_type=imasig'}, {@euid_lt={'euid<', r4}}, {@appraise='appraise'}]}})
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1654.034719][ T2714] Unknown ioctl 1101049485
05:36:35 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

[ 1654.055878][   T27] audit: type=1804 audit(1578807395.453:1992): pid=2714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/952/file0" dev="sda1" ino=17649 res=1
05:36:35 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4b]})

05:36:35 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

[ 1654.220727][   T27] audit: type=1804 audit(1578807395.493:1993): pid=2711 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/728/file0" dev="sda1" ino=17650 res=1
05:36:35 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:35 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c]})

05:36:35 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:36 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:36 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

[ 1655.852664][   T27] audit: type=1804 audit(1578807397.243:1994): pid=2711 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/728/file0" dev="sda1" ino=17650 res=1
05:36:37 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00004, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:37 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4d]})

05:36:37 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

[ 1656.608378][   T27] audit: type=1804 audit(1578807398.003:1995): pid=2762 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/729/file0" dev="sda1" ino=16641 res=1
[ 1657.550337][   T27] audit: type=1804 audit(1578807398.933:1996): pid=2762 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/729/file0" dev="sda1" ino=16641 res=1
05:36:39 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc000f0, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:39 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:39 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000200))
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
r3 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x40, 0x2000)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x20000001})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
openat$cgroup_ro(r0, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x8000)
ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000280))
ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x0, @phonet={0x23, 0x20, 0xe6, 0x10}, @nfc={0x27, 0x1, 0x1, 0x7}, @llc={0x1a, 0x3, 0x4, 0x6, 0x0, 0x4}, 0x20, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)='caif0\x00', 0x3, 0x1, 0x6})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:39 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:39 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4e]})

05:36:39 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r6=>0x0})
r7 = socket(0x100000000011, 0x2, 0x0)
bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4c57660af3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf205bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}]}, 0x40}}, 0x0)
accept4$packet(r0, &(0x7f00000007c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14, 0x141400)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005e40)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000005f40)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000006140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x6082}, 0xc, &(0x7f0000006100)={&(0x7f0000005f80)={0x15c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r8}, {0xfc, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x3, 0x20, 0x7, 0x1ff}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000805)
r11 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r11)
ioctl$EXT4_IOC_SWAP_BOOT(r11, 0x6611)
fcntl$setstatus(r1, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(r11, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1100080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, 0xa, 0x6, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, '*:@\x00'}}]}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x20, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x19, 0x1a, '\xdaeth1*vboxnet0md5sum\x00'}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x8800)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1657.784457][   T27] audit: type=1804 audit(1578807399.183:1997): pid=2776 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/953/file0" dev="sda1" ino=17009 res=1
[ 1657.868081][ T2778] device veth1_to_bond entered promiscuous mode
05:36:39 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

[ 1657.922780][   T27] audit: type=1804 audit(1578807399.283:1998): pid=2780 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/730/file0" dev="sda1" ino=17076 res=1
05:36:39 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup2(r1, r1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:39 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4f]})

[ 1657.971913][ T2778] lo: Cannot use loopback or non-ethernet device as HSR slave.
[ 1658.050396][ T2778] device veth1_to_bond left promiscuous mode
05:36:39 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:39 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:39 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x50]})

[ 1658.386623][   T27] audit: type=1804 audit(1578807399.783:1999): pid=2794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/953/file0" dev="sda1" ino=17009 res=1
[ 1659.042710][   T27] audit: type=1804 audit(1578807400.443:2000): pid=2783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/730/file0" dev="sda1" ino=17076 res=1
05:36:40 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc04000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:40 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:40 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x51]})

05:36:40 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.nlink\x00', &(0x7f0000000180)=""/149, 0x95)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000280))
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x68802, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:40 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1659.280610][   T27] audit: type=1804 audit(1578807400.683:2001): pid=2825 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/954/file0" dev="sda1" ino=17119 res=1
05:36:40 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:40 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

[ 1659.368896][   T27] audit: type=1804 audit(1578807400.743:2002): pid=2829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/731/file0" dev="sda1" ino=17118 res=1
05:36:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x52]})

05:36:41 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:41 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:41 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x53]})

[ 1660.789425][   T27] audit: type=1804 audit(1578807402.183:2003): pid=2829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/731/file0" dev="sda1" ino=17118 res=1
05:36:42 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:42 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x54]})

05:36:42 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0f000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:42 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x40)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
write$P9_RWALK(r0, &(0x7f00000000c0)={0x71, 0x6f, 0x2, {0x8, [{0x21, 0x2, 0x8}, {0x8, 0x3, 0x8}, {0x48, 0x4}, {0x20, 0x0, 0x7}, {0x4, 0x3, 0x2}, {0x2, 0x4, 0x6}, {0x12, 0x4, 0x5}, {0x8e, 0x3, 0x2}]}}, 0x71)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1661.098327][   T27] audit: type=1804 audit(1578807402.493:2004): pid=2869 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/955/file0" dev="sda1" ino=17129 res=1
[ 1661.224668][   T27] audit: type=1804 audit(1578807402.583:2005): pid=2870 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/732/file0" dev="sda1" ino=16562 res=1
[ 1662.437046][   T27] audit: type=1804 audit(1578807403.833:2006): pid=2871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/732/file0" dev="sda1" ino=16562 res=1
05:36:43 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)
ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f00000000c0))
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:43 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:43 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:43 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x55]})

05:36:43 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000100)={0x45, 0x11, &(0x7f00000002c0)="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"})
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = dup(r3)
ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f00000000c0))
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1662.608891][   T27] audit: type=1804 audit(1578807404.003:2007): pid=2886 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/956/file0" dev="sda1" ino=17136 res=1
05:36:44 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x2, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:44 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:44 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f00000001c0)={0x1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, @local}]})

05:36:44 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x56]})

[ 1662.983466][   T27] audit: type=1804 audit(1578807404.373:2008): pid=2897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/733/file0" dev="sda1" ino=17103 res=1
05:36:44 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:44 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, 0x0)

05:36:44 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x57]})

[ 1663.568927][   T27] audit: type=1804 audit(1578807404.963:2009): pid=2914 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/956/file0" dev="sda1" ino=17136 res=1
[ 1663.793511][   T27] audit: type=1804 audit(1578807405.193:2010): pid=2897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/733/file0" dev="sda1" ino=17103 res=1
05:36:46 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:46 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:46 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, 0x0)

05:36:46 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x58]})

05:36:46 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/194})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
r3 = msgget$private(0x0, 0x28d)
msgctl$IPC_RMID(r3, 0x0)
msgctl$IPC_STAT(r3, 0x2, &(0x7f00000002c0)=""/131)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:46 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1665.084180][   T27] audit: type=1804 audit(1578807406.473:2011): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/734/file0" dev="sda1" ino=17153 res=1
05:36:46 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, 0x0)

05:36:46 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x59]})

[ 1665.217941][   T27] audit: type=1804 audit(1578807406.523:2012): pid=2934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/957/file0" dev="sda1" ino=17249 res=1
05:36:46 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:46 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, 0x0})

05:36:47 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:47 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5a]})

05:36:47 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, 0x0})

05:36:47 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:47 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5b]})

05:36:47 executing program 3:
creat(&(0x7f00000000c0)='./file0\x00', 0xa7)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000280))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000280))
fcntl$setstatus(r4, 0x4, 0x668b01574a2459a7)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x104850, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1666.706020][   T27] audit: type=1804 audit(1578807408.103:2013): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/734/file0" dev="sda1" ino=17153 res=1
05:36:48 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:48 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, 0x0})

05:36:48 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5c]})

05:36:48 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000280))
ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0))
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:48 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)
ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000000c0)={0x1, 0x3, 0x1, {0x1, 0x7f, 0x401, 0x80000001}})
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:48 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0xf0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:48 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

[ 1667.131207][   T27] audit: type=1804 audit(1578807408.533:2014): pid=2999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/958/file0" dev="sda1" ino=17377 res=1
05:36:48 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5d]})

05:36:48 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

[ 1667.230703][   T27] audit: type=1804 audit(1578807408.633:2015): pid=3001 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/735/file0" dev="sda1" ino=16641 res=1
05:36:48 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:49 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:49 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5e]})

05:36:49 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, 0x0)

05:36:49 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, &(0x7f0000002f40)})

05:36:49 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]})

[ 1668.657051][   T27] audit: type=1804 audit(1578807410.053:2016): pid=3001 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/735/file0" dev="sda1" ino=16641 res=1
[ 1668.937476][   T27] audit: type=1804 audit(1578807410.333:2017): pid=2999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/958/file0" dev="sda1" ino=17377 res=1
05:36:50 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:50 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, 0x0)

05:36:50 executing program 5:

05:36:50 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x60]})

05:36:50 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000280))
r2 = accept(r1, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80)
connect$caif(r2, &(0x7f0000000180)=@util={0x25, "d1a1c4d1d659c0a41013866da6d4e493"}, 0x18)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000280))
r5 = syz_genetlink_get_family_id$tipc(0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x34, r5, 0xe11, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'hsr0\x00'}}}}}, 0x34}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="55000000ee95c3e304daedb2aed3c63fe08491dec888e99332b19f00ee5afe75913a9b855e26e12ffadc901679c3af196791fbc62035002a6f688c7db41dfcb6b95cd92d5a", @ANYRES16=r5, @ANYBLOB="00042cbd7000fbdbdf25010000000000000007410000004c001800000001696200"/98], 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x80000)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000240)={0x15, 0x4a, &(0x7f00000001c0)="3c7b754ed7cc6a6979e993f17dd22a9c3389fa0195b9fb63e65247a1025b59051711a73ae789a12306200f35c8ae6342ff581cc7f327112221ba0d47d8fcdf07d514ec16df69660a54b8"})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:50 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r4}, &(0x7f0000000140)=0x8)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r7}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={<r8=>r7, 0xa20, 0x800}, &(0x7f00000004c0)=0xc)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r11=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r11}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x8000, @ipv4={[], [], @rand_addr=0x7}, 0x10000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="128c2b91da911c802e0e91c02e9061fbfa8ce0ad8dadf3cc8200d63b79a9b3cc3eaa19538d429580b6dcde", 0x2b}], 0x1, &(0x7f0000000180)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x4000000}, {&(0x7f00000001c0)=@in6={0xa, 0x4e24, 0x7, @loopback, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="22ad8a004c290945641b26d5a77aedc40468174308ee31711db7c9ceabb6c1ca808fa43f92664deaeebf4ffd77fd842912862f6756a79c3b6ff2eec2e8aea0fc", 0x40}, {&(0x7f00000002c0)="ac2a8405f88f86fc45871d09fa6b13fb4d560a6235f9078c91d49645b51c6105e8c4b85e1130681c4cfc27287a0f7ae76167143b59a77e431d10d1e936d2ee293ae6ad4beacf61067024b91d8ae2d8869d98a2e4024099a64977993583017805ac503e7f", 0x64}, {&(0x7f0000000340)="74f69aadca0cb6bbb0b899b43831c07722f417d402e31472c2e3b59b8955c81af4991335f6bc1878ab1f8628ab5218cab7948cc1e2393853d61e88644d122c1d0e155bc56f1f", 0x46}, {&(0x7f00000003c0)="09865ad92ea5d2ddad3f221f8f5f6c38a18c0334f3a777efd34adf82cf23119c5ae273c5eb20a562e9f360804088f2498451ab50ced23e556d1ca9f4a0b1440dbf74cd03706bdb33cb579661dd0946e58bce54d6fe8b01f07bdd33ceb71ceef05d2ab6b7e548f4addac8a071953a45db038f33c522b97332201cda48d21e334238f49fe718da6e4f79e0c98182c20ae858ec5c5d0f7208bca46847200f40", 0x9e}], 0x4, &(0x7f0000000500)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x20c, 0x21, 0x83bb, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x1, 0x6, 0x80000001, r8}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x200, 0x2, 0x1, r11}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @init={0x18, 0x84, 0x0, {0xff7f, 0x80, 0xac12, 0x9}}], 0xc8, 0x20000010}], 0x2, 0x10)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1669.208283][   T27] audit: type=1804 audit(1578807410.603:2018): pid=3045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/736/file0" dev="sda1" ino=17160 res=1
05:36:50 executing program 5:

[ 1669.342988][   T27] audit: type=1804 audit(1578807410.743:2019): pid=3054 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/959/file0" dev="sda1" ino=17553 res=1
[ 1669.373474][ T3054] sctp: [Deprecated]: syz-executor.1 (pid 3054) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1669.373474][ T3054] Use struct sctp_sack_info instead
05:36:50 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x61]})

05:36:50 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, 0x0)

[ 1669.426250][ T3055] sctp: [Deprecated]: syz-executor.1 (pid 3055) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1669.426250][ T3055] Use struct sctp_sack_info instead
[ 1669.464597][ T3054] sctp: [Deprecated]: syz-executor.1 (pid 3054) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1669.464597][ T3054] Use struct sctp_sack_info instead
05:36:51 executing program 5:

05:36:51 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x62]})

05:36:51 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup2(r0, r0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f00000001c0)={0x0, 0x0})

[ 1670.738080][   T27] audit: type=1804 audit(1578807412.133:2020): pid=3050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/736/file0" dev="sda1" ino=17160 res=1
05:36:52 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0xf000, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:52 executing program 5:
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=""/82, 0x52})
clone(0x49b96b00, 0x0, 0x0, 0x0, &(0x7f0000000300))
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="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"})
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000080)={{0x0, 0x0, @reserved="0a4e33ea21d57f602b031eddd263a37f1ba182c7143d5ec2edb6914f0ac90c41"}})
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)

05:36:52 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x63]})

05:36:52 executing program 0:
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=""/79, 0xfd08})
clone(0x49b96b00, 0x0, 0x0, 0x0, &(0x7f0000000300))
syz_open_procfs(0x0, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="00a18f080000002982d1c45b7900160000001a0000004d4384818e180b2696e86e3406901b32a85c18dd9ff833386056de4004f2c2ee34572b96c659a46fd8226e146e87eea6d080837d3f26c60778e40f5f1681fe8e94727d9a57ba7bdb571588461712da28b2b5cbda2cfe8bce4f763b045e70f14af516cadde4d38709a77dab5b503703bbb9ffff8657ee90d177e8e03a2542990b783f58eb71c6417df342424bc98f024d1a245fe4f2332bb2294ca29ad02adf8f10b38b0200000000000000fa1a4fe36f4ef4d916a2d3be853a8a89b658a0d6f9"])
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ae, 0x0, 0xfffffffffffffdf6}, 0x0)

[ 1671.113329][ T3086] IPVS: ftp: loaded support on port[0] = 21
[ 1671.139269][ T3088] IPVS: ftp: loaded support on port[0] = 21
[ 1671.154411][ T3055] sctp: [Deprecated]: syz-executor.1 (pid 3055) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1671.154411][ T3055] Use struct sctp_sack_info instead
[ 1671.161363][ T3090] sctp: [Deprecated]: syz-executor.1 (pid 3090) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1671.161363][ T3090] Use struct sctp_sack_info instead
[ 1671.199173][ T3094] sctp: [Deprecated]: syz-executor.1 (pid 3094) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1671.199173][ T3094] Use struct sctp_sack_info instead
05:36:52 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1671.569558][   T21] tipc: TX() has been purged, node left!
05:36:53 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3c6f92b3a80afcb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0xb, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'veth0_to_bridge\x00', @ifru_map={0x4, 0x0, 0x0, 0x2}})
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

05:36:53 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x64]})

05:36:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x1}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, 0x2, 0x1, 0x300, 0x70bd27, 0x25dfdbfd, {0x3, 0x0, 0x7}, [@CTA_HELP={0x14, 0x5, {0xf, 0x1, 'netbios-ns\x00'}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x3bda7652394380b)
write$cgroup_int(r0, &(0x7f0000000000)=0x9, 0x12)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), 0x0)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x0, 0xc00, 0x0, [0xff0f, 0x3800000]})
r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x0, 0xc00, 0x0, [0xff0f, 0x3800000]})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = dup3(r4, r5, 0x0)
ioctl$KVM_SET_CPUID(r6, 0x4138ae84, 0x0)
dup2(r7, r6)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r8 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDDELIO(r8, 0x4b35, 0x5)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)={0x8, 0x7, 0x20, 0x0, 0x9, 0x5, 0x4, 0x7, 0x5, 0x6e, 0x46, 0x1f, 0x0, 0x0, 0xda, 0x7, 0x7, 0x5, 0x2, [], 0xe5, 0x9})
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a000a2d8118952ac307df1c14eca8d0422ef44281302a63fc71bb0b99a0abba87f355c1503fa68d45a02ab7ce6e2a1b978d01b1e1ccdd21f7ca7", @ANYRES16=r9, @ANYBLOB="010925bd7000fbdbdf2506000000180001000c0007000000000009bfd40000000800040072211ad8db00000014000300080001000300000008000400050000000700050000000100080006001f00000008000500f8ffffff080004000300000030000300080008003f000000080008000400000008e903008100000014000200bd0000000000000089da42f57f5b3b00760aafbc55c7ee21e2e0570b9c2bd92d17e6cadb77fb6d248c78d1534a9cab9310e009c3c243cfc31dda3595a679b5d2beed5c635f552688f6af0552fceb99a4e73e7cfb4f2e8378701d80207db8f6d9a8fd82ad45939ee19da0080fe28b55eaf16f8f3973874bda"], 0x3}}, 0x20004800)
splice(r3, &(0x7f0000000040)=0x30, r3, &(0x7f00000000c0)=0xfffffffffffffffe, 0xe54, 0x1a)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)

[ 1671.923440][   T27] audit: type=1804 audit(1578807413.323:2021): pid=3116 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/960/file0" dev="sda1" ino=17675 res=1
05:36:53 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x65]})

05:36:53 executing program 0:
perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0}, 0x0)

[ 1672.227881][   T27] audit: type=1804 audit(1578807413.623:2022): pid=3119 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir318013879/syzkaller.8Oz5lI/794/bus" dev="sda1" ino=17377 res=1
05:36:53 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000017c0)=ANY=[@ANYBLOB="3400000021000900000000000000000002000000000000000000000008000100ffffffff080006000000000008000e0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/105, 0x69}], 0x1)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
dup(0xffffffffffffffff)

[ 1672.443472][   T27] audit: type=1804 audit(1578807413.833:2023): pid=3091 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/737/file0" dev="sda1" ino=17668 res=1
05:36:54 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0xf0ffff, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:54 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x66]})

05:36:54 executing program 0:
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=""/74, 0x4a})
clone(0x49b96b00, 0x0, 0x0, 0x0, &(0x7f0000000300))
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="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"})
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000080)={{0x0, 0x0, @identifier="a8e008d9cff32fb4d8e8e6cba11fedf3"}})
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xffffff6f, 0x0, 0xfffffffffffffda5, 0x0, 0x43}, 0x0)

05:36:54 executing program 5:
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=""/74, 0x4a})
clone(0x49b96b00, 0x0, 0x0, 0x0, &(0x7f0000000300))
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="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"})
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000080)={{0x0, 0x0, @reserved="52da8ae6ccd311078d14860bd2af9d713c610ead4652a82529864e187a8a7200"}})
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xffffff6f, 0x0, 0xfffffffffffffda5, 0x0, 0x43}, 0x0)

[ 1673.020816][ T3166] IPVS: ftp: loaded support on port[0] = 21
[ 1673.056780][ T3168] IPVS: ftp: loaded support on port[0] = 21
[ 1673.132273][   T27] audit: type=1804 audit(1578807414.533:2024): pid=3116 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/960/file0" dev="sda1" ino=17675 res=1
[ 1673.255444][   T27] audit: type=1804 audit(1578807414.533:2025): pid=3170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/738/file0" dev="sda1" ino=17665 res=1
05:36:55 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:55 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x67]})

05:36:55 executing program 5:
clone(0x49b96b00, 0x0, 0x0, 0x0, &(0x7f0000000300))
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=""/106, 0x6a})
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="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"})
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000080)={{0x0, 0x0, @identifier="9ff1c9200000c5b885761f3a11a9759d"}})
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xff9b, 0x0, 0x0, 0x0, 0x214}, 0x0)

05:36:55 executing program 0:
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=""/73, 0x1b})
clone(0x49b96b00, 0x0, 0x0, 0x0, &(0x7f0000000300))
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="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"})
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000080)={{0x0, 0x0, @identifier="99774547a0f15554a9c752cd2defbc78"}})
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3be}, 0x0)

05:36:55 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8000, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
fcntl$setlease(r1, 0x400, 0x0)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1673.709542][   T27] audit: type=1804 audit(1578807415.103:2026): pid=3173 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/738/file0" dev="sda1" ino=17665 res=1
[ 1673.846307][ T3189] IPVS: ftp: loaded support on port[0] = 21
[ 1673.886871][ T3198] IPVS: ftp: loaded support on port[0] = 21
[ 1673.897101][   T27] audit: type=1804 audit(1578807415.303:2027): pid=3191 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/961/file0" dev="sda1" ino=17678 res=1
05:36:55 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x68]})

05:36:55 executing program 0:
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=""/73, 0x1b})
clone(0x49b96b00, 0x0, 0x0, 0x0, &(0x7f0000000300))
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="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"})
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000080)={{0x0, 0x0, @reserved="6a65b2d58d4f9314b408131faa688fd30f733b08e55da66af51d8581503ebf81"}})
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3be}, 0x0)

05:36:55 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1000000, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:55 executing program 5:
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=""/106, 0xfffffffffffffef2})
clone(0x49b96b00, 0x0, 0x0, 0x0, &(0x7f0000000300))
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="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"})
syz_open_dev$tty20(0xc, 0x4, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="edb275777d13184f7fff61c08da034269f0bbb595569"], 0x16)
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffffffffe6d, 0x0, 0xffd248043e9e1dfb}, 0x0)

05:36:55 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x69]})

[ 1674.468466][ T3218] IPVS: ftp: loaded support on port[0] = 21
[ 1674.493478][ T3220] IPVS: ftp: loaded support on port[0] = 21
[ 1674.564673][   T27] audit: type=1804 audit(1578807415.953:2028): pid=3219 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/739/file0" dev="sda1" ino=17679 res=1
[ 1674.794018][   T27] audit: type=1804 audit(1578807416.193:2029): pid=3191 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/961/file0" dev="sda1" ino=17678 res=1
05:36:56 executing program 0:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0)
open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000280)={0x0, 0x14}, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

05:36:56 executing program 5:
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=""/53, 0xfffffc59})
clone(0x49b96b00, 0x0, 0x0, 0x0, &(0x7f0000000300))
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="0272aae16e010f05dfd5d71cc8bab91d6d936cf44cd317b97f2a55de2da11f6e18b9d00ffc2ffadbfb9717eba42e7fe4a15cb583ea3eda7784d6295485da75d990180231f59ebe181b0c1efb0834ccb53d1cec4a6f2a239e64b7933129033faecb8a1ba890153d6c7b44e714cda28b4f3fcba183aa4829e8639470759738801af931737681657f6decd5d726312531bc25ba09f691da2205000001ad6958f651438f5aec2b0a627181f982be1b312614ee1fb7ead43f88c89ac6fef1ea610820076a16019cc346d8884480145ebb4503000000c73822fd33b7f22ff104ad68db421422335d97ce336d513503de9d4a62d3d7b29b2f969a774173e7b339ff750804c0a0f91011c34854d5e076ed75929c914d44eee8e0080e510b224edcb1aacefd47a6eb51627a52fac53eed4cc9a20246a637eb5e95ce9028da700dae4089a89ca94c84c37738754288f1aa22eaa4ba6cdda04b3b1fb846c65802809bd2a65a6f7919078cec6d9b22625be698c8057c7ee6f33c20e4b96ebdca22a4dc6d1a61df20edd8205cc448ed6b846ff0b6c35a4963e48427c098a542f36a05012161f74ad26a867740f64ed44aed19a4d5582b0a99f8c8a5781c91477302cf5e929bbec534eb4fc6b62b203bcc627913d817f57db502d57be3205727e2c6e47d2d201885eb6455273276e3a35a80d5aedbbac70a1b0a9173c797608479a7631eb8b63195efe23f35ff7615900b191ed2e0053cebd06218df7fccf1717434a11c812057f083431a22cbacd089927d7c1509b0e94624b130b8aadd0af89eb4b6bfcc4cf67db95bd731892be3f1a2bf17917f4525f6e3463f331378f7ee7a872721adfea62c16bf0e4c4a25971c9e64ca3a55ef13eddc6d6557931f149a0929cb87b8371e354ef6f06b1abeb506d5b6c7d35b51dabd94a4d816fbd3491e17c0094a659075724b94da23e5d9b4d260ef723929d79f14361ddab19bde5a05677c161ce38324c9264288db8a67b79598ef0c00000000000000f21026f12c843afb510d2dff09f709aee946d38fe1f5304a11185bdf08e92ea42cfd576508359bd538195a0737c29445cda5504ddab67ebd1310dc8efc0380db010da701d2ffdc26575535f289535d625debc3492f7b3c20ff63c3b984813d7de5f0fd69580ec787de4a5c2ea293530a2f1fce30558b6dcb6776dcb256f817078849bc82000051f65bcccccff18f09b6269cf340eda8ef555976a33eec417ce523ec5a94c8bfc8d2e61adad9f7759529bb7dc46d3954853aabe78f77e365075c04ee83091967504f7116d10fc2e3f3ef1ffc311397cffadb2ca0fcd4e18b44e08346192dbab940470b92a5a44d15df225f020abc62636c97509063f8d3633d8c0bc1fc783fd8f15d388dfa391c31b176ee3c730b765345d3a19300980567196ba63300"})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_pts(r0, 0x10a00)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000080)={{0x0, 0x0, @identifier="8c895a48fefb7a51f1eb309b2cf09d36"}})
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)

[ 1675.296637][ T3240] IPVS: ftp: loaded support on port[0] = 21
[ 1675.649575][   T21] tipc: TX() has been purged, node left!
[ 1675.999565][   T21] tipc: TX() has been purged, node left!
[ 1676.189572][   T21] tipc: TX() has been purged, node left!
05:36:57 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x333a7992, 0x111000)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000140)={0xcd, 0x4, 0x3, 0x4, 0x3f})
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000000c0))
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x100)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:57 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6a]})

05:36:57 executing program 5:
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=""/113, 0x2bc})
clone(0x49b96b00, 0x0, 0x0, 0x0, &(0x7f0000000300))
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="0272aae16e010f05dfd5d71cc8bab91d6d936cf44cd317b97f2a55de2da11f6e18b9d00ffc2ffadbfb9717eba42e7fe4c05cb583ea3eda7784d6295485da75d990180231f59ebe181b0c1efb0834ccb53d1cec4a6f2a239e64b7933129033faecb9e1ba890153d6c7b44e714cda28b4f3fcba183aa4829e8639470759738801af931737681657f6decd5d726312531bc25ba09f691da22dfa2773bad6958f651438f5aec2b0a627181f982be1b312614ee1fb7ead43f88c89ac6fef1ea610820076a16019cc346d8884480141ebb4503000000c73822fd33b7f22ff104ad68db421422335d97ce336d513503de9d4a62d3d7b29b2f969add4af8c0b339ff750804c0a0f91011c34854d5e076ed7592bc914d44eee8e0080e510b224edcb1aacefd47a6eb51627a52fac53eed4cc9a20246a637eb5e95ce9028da700daf4089a89ca94c84c37738754288f1aa22eaa4ba6cdda04b3b1fb846c65802809bd2a65a6f7919847b65956fb34a9ee698c8057c7ee6f33c20e4b96ebdca22a4dc6d1a61df20edd8205cc448ed6b846ff0b6c35a4963e48427c098a542f36a05012161f74ad26a867740f64ed44aed19a4d5582b0a99f8c8a5781c91477302cf1e929bbec534eb4fc6b62b203bcc627913d817f57db502d57be3205727e2c6e47d2d201885eb6455273276e3a35a80d5aedbbac70a1b0a9173c797608479a7631eb8b63195efe23f354a7615900b191ed2e0053cebd06218df7fccf1717434a11c812057f083431a22cbacd089927d7c1509b0e94624b130b8aadd0af89eb4b6bfcc4cf67db95bd731892be3f1a2bf17917f4525f6e3463f331378f7ee7a872721adfea62c16bf0e4c4a25971c9e64ca3a55ef13eddc6d6557931f149a0929cb87b8371e354ef6f06b1abfb506d5b6c7d35b51dabd94a4d816fbd3491e17c0094a659053724b94da23e5d9b4d260ef723929d79f14361ddab19bde5a05677c161ce38324c9264288dde2d398d52f87cf72a9e2db8a67b79598ef9f8fb5ac41fab294f21026f12c843afb510d2dff09f709aee946d38fe1f5304a11185bdf08e92ea42cfd576508359bd538195a0737c29445cda5504ddab67ebd1310dc8efc0380db010da701d2ffdc26575535f289535d625debc3494a7b3c20ff63c3b984813d7de5f0fd69580ec787de4a5c2ea293530a2f1fce30558b6dcb6776dcb256f817078849e597dd5651f65bcccccff1749cb46a79f37005a8ef555976a33eec417ce523ec5a94c8bfc8d2e61adad9f7759529bb7dc46d3954853aabe78f77e365075c04ee83091967504f7116d10fc2e3f3ef1ffc311397cffadb2ca0fcd4e18b44e08346192dba9840470b92a5a44d15df225f020abc62636c97509063f8d3633d8c0bc1fc783fd8f15d388dfa391c31b176ee3c730b765345d3a19300980567196ba633"})
syz_open_dev$tty20(0xc, 0x4, 0x0)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140)="2927e0355ad730713cbf9a90ce2763c29ef31e1b50d2", 0x16)
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffffffffe6d, 0x0, 0xffd248043e9e1dfb}, 0x0)

05:36:57 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x2000000, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:57 executing program 0:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0)
open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000280)={0x0, 0x14}, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

05:36:57 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
fchown(r1, 0x0, 0xffffffffffffffff)

[ 1676.359603][   T21] tipc: TX() has been purged, node left!
[ 1676.475499][ T3270] IPVS: ftp: loaded support on port[0] = 21
[ 1676.504661][   T27] kauditd_printk_skb: 1 callbacks suppressed
05:36:57 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6b]})

[ 1676.504683][   T27] audit: type=1804 audit(1578807417.893:2031): pid=3271 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/740/file0" dev="sda1" ino=17693 res=1
[ 1676.510123][   T21] tipc: TX() has been purged, node left!
05:36:58 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c]})

05:36:58 executing program 5:
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=""/106, 0xfffffffffffffef2})
clone(0x49b96b00, 0x0, 0x0, 0x0, &(0x7f0000000300))
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="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"})
syz_open_dev$tty20(0xc, 0x4, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="edb275777d13184f7fff192918e6375d3d7dc887ec1a"], 0x16)
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffffffffe6d, 0x0, 0xffd248043e9e1dfb}, 0x0)

[ 1676.850805][   T21] tipc: TX() has been purged, node left!
05:36:58 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6d]})

[ 1677.001829][   T21] tipc: TX() has been purged, node left!
[ 1677.089025][ T3297] IPVS: ftp: loaded support on port[0] = 21
05:36:58 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6e]})

05:36:58 executing program 5:
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=""/72, 0x336})
clone(0x49b96b00, 0x0, 0x0, 0x0, &(0x7f0000000300))
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="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"})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000080)={{0x0, 0x0, @identifier="9b7627daf97c9a678b80ed0411033157"}})
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)

[ 1677.753103][ T3316] IPVS: ftp: loaded support on port[0] = 21
05:36:59 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:59 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1a1000, 0x15)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000100))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:36:59 executing program 0:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0)
open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000280)={0x0, 0x14}, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

[ 1678.385963][   T27] audit: type=1804 audit(1578807419.783:2032): pid=3341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/963/file0" dev="sda1" ino=17688 res=1
05:37:01 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4000000, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:01 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6f]})

05:37:01 executing program 5:
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=""/106, 0xfffffffffffffef2})
clone(0x49b96b00, 0x0, 0x0, 0x0, &(0x7f0000000300))
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="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"})
syz_open_dev$tty20(0xc, 0x4, 0x0)
lsetxattr(0x0, &(0x7f0000000080)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffffffffe6d, 0x0, 0xffd248043e9e1dfb}, 0x0)

05:37:01 executing program 0:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f00000024c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000280)='./file0\x00', 0x0)

[ 1680.459406][ T3363] IPVS: ftp: loaded support on port[0] = 21
05:37:01 executing program 0:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
pkey_alloc(0x0, 0x0)
timer_create(0x0, &(0x7f0000000280)={0x0, 0x14}, &(0x7f0000000040)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
write$9p(r5, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$netlink(0x10, 0x3, 0x0)
recvmsg(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
write$9p(r3, 0x0, 0x0)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2b, 0x0, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x840)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

05:37:02 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x70]})

[ 1680.592677][   T27] audit: type=1804 audit(1578807421.993:2033): pid=3366 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/741/file0" dev="sda1" ino=17700 res=1
05:37:02 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2011, r0, 0x0)
clone3(&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
mmap(&(0x7f0000a0c000/0x4000)=nil, 0x4000, 0x0, 0x2012, r0, 0x0)
mlock2(&(0x7f0000a0d000/0x1000)=nil, 0x1000, 0x1)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

05:37:02 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x71]})

05:37:02 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa8]})

[ 1681.383811][   T27] audit: type=1804 audit(1578807422.783:2034): pid=3366 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/741/file0" dev="sda1" ino=17700 res=1
05:37:02 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, 0x0}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7, 0x7, 0x5, 0x1}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x81, 0x7, 0x5}, 0x1f)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000400)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20)

05:37:03 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x40000000, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:03 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe4]})

05:37:03 executing program 0:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@random={'security.', 'selinux\x00'}, 0x0, 0x2)

05:37:03 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7868f1eaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9091a7511bf746bec66ba", 0xfe6a, 0x2, 0x0, 0x27)

[ 1682.410313][   T21] tipc: TX() has been purged, node left!
05:37:04 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x300]})

[ 1682.563170][   T21] tipc: TX() has been purged, node left!
[ 1682.586310][   T27] audit: type=1804 audit(1578807423.983:2035): pid=3429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/742/file0" dev="sda1" ino=17693 res=1
05:37:04 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}, {}], 0x10)

05:37:04 executing program 0:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x24, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:04 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = open(0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000280))
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000300)='vboxnet0md5sum/+ppp1-,)selinux\x00', &(0x7f0000000340)='/dev/snapshot\x00', 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000280))
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0)
ioctl$MON_IOCG_STATS(r8, 0x80089203, &(0x7f0000000000))
r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82)
ioctl$LOOP_CTL_ADD(r7, 0x4c80, r9)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r9)
ioctl$LOOP_SET_FD(r1, 0x4c00, r4)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000000c0)={0x81, "c2dce22bd9a411eab6e82ffffd06959757dbe70bf1f97289dc9f145d62930c4b6f8abcb3526eb5c34d36829cbb82f7f146fa53a0b88e492639cd406ee1954d0df696a6410e50c631550cb06d6bc937d6f2407f84f9acd94252bbe65aed5f7dfeceb3a11e2b76cd8fcb6e93ed5d42411f54efc4f010cabc64c09452e388175cc851ec25789c876810fa8114893c32758367311faffa27f6ac7bb93477290fa6ee8df567391d881936fb36c65cd1374bd69880ddaf4ba7de96f2ad43fb9bee8fc708cbe51424ba7e0c92f2f20c76fe524c61f6343ce755be1c645ab55ff5e7372de1c310c192aea40af502c2d861cfed735937a0c782a1ce16953ee48b1ca16347a5652b76443b7e07c1d08d5b055965be23dfdf5377a9cc498a02ff4aa7a2fcaed4de3906bb70c1a82c51af31a5e86b8c9e137aab0b1b034d3671f2b35f6341f06892d699dacc1f86580296e436c3898be0ef747c6a198192d90f391b589dc533bb1c8c0b54a1eaab9581fea249a826458913f09c3cb5a10886546a0544f0041a5724ffdf893bf6c758dd05dfa5f0eaacd88a167b2567d819f4e64cc2a9ae391c50da77d6fc486c4e6668b82423e34eb23f093f8b44d4eabf835a7183a2fa3629554752c32065f0c1f1d364da0cd3565f3b9faf33a82004b6ae66aabaed048e4e651700d2bd41d8a2337e095c00d1afdac4d2cddfecb63a57c563860a5c649623"})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1682.773475][   T21] tipc: TX() has been purged, node left!
05:37:04 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x390]})

[ 1682.962111][   T21] tipc: TX() has been purged, node left!
05:37:04 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b"], 0x14}}, 0x0)
recvmmsg(r0, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400})

[ 1683.102008][   T21] tipc: TX() has been purged, node left!
[ 1683.329936][   T27] audit: type=1804 audit(1578807424.723:2036): pid=3429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/742/file0" dev="sda1" ino=17693 res=1
05:37:04 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xf00]})

05:37:05 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xb2, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/541], 0xfdc4}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x6, 0x0, 0x0, 0x2000}]}, 0x10)
sendmmsg(r1, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0)

05:37:05 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0xfffff000, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:05 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2700]})

05:37:05 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp\x00', 0xf590c5150366f9dc)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78602c5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

[ 1684.095787][   T27] audit: type=1804 audit(1578807425.493:2037): pid=3476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/743/file0" dev="sda1" ino=17200 res=1
05:37:05 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2800]})

05:37:05 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
close(r0)

[ 1684.691028][   T27] audit: type=1804 audit(1578807426.083:2038): pid=3476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/743/file0" dev="sda1" ino=17200 res=1
05:37:08 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9)
sendto$inet(r0, &(0x7f00000012c0)='\f', 0xb00, 0x0, 0x0, 0x0)

05:37:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2900]})

05:37:08 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
close(r0)

05:37:08 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1000000000000, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:08 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x122, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x6, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x9}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
socketpair(0x23, 0x5, 0x1f, &(0x7f0000000180))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={<r2=>0x0, 0x5}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4)

05:37:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2a00]})

[ 1686.888306][   T27] audit: type=1804 audit(1578807428.283:2039): pid=3515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/744/file0" dev="sda1" ino=16817 res=1
05:37:08 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
close(r0)

05:37:08 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}], 0x8)

05:37:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2b00]})

05:37:08 executing program 5:
r0 = socket$inet(0x2b, 0x801, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x3, &(0x7f0000000000)=0xfffffffb, 0xbf)

05:37:08 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
close(r0)

05:37:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2c00]})

[ 1687.448654][   T27] audit: type=1804 audit(1578807428.843:2040): pid=3515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/744/file0" dev="sda1" ino=16817 res=1
05:37:08 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:09 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:09 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2d00]})

05:37:09 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0xf0ffffffffffff, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1688.063945][   T27] audit: type=1804 audit(1578807429.463:2041): pid=3577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/745/file0" dev="sda1" ino=16913 res=1
[ 1688.401575][   T27] audit: type=1804 audit(1578807429.793:2042): pid=3577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/745/file0" dev="sda1" ino=16913 res=1
05:37:09 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:09 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2e00]})

05:37:09 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:10 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:10 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x100000000000000, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:10 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2f00]})

05:37:10 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
close(r0)

[ 1688.998111][   T27] audit: type=1804 audit(1578807430.393:2043): pid=3603 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/746/file0" dev="sda1" ino=16913 res=1
05:37:10 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:10 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3000]})

05:37:10 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:11 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3100]})

05:37:11 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

[ 1689.914423][   T27] audit: type=1804 audit(1578807431.313:2044): pid=3603 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/746/file0" dev="sda1" ino=16913 res=1
05:37:11 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3200]})

05:37:11 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:11 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:13 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x200000000000000, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:13 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
dup2(r1, r2)
socket$inet6(0xa, 0xa, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:13 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3300]})

05:37:13 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)

05:37:13 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

[ 1692.616590][   T27] audit: type=1804 audit(1578807434.013:2045): pid=3667 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/747/file0" dev="sda1" ino=17198 res=1
05:37:14 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3400]})

05:37:14 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)

05:37:14 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:14 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3500]})

05:37:14 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

[ 1693.370479][   T27] audit: type=1804 audit(1578807434.763:2046): pid=3667 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/747/file0" dev="sda1" ino=17198 res=1
05:37:15 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)

05:37:15 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3600]})

05:37:15 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x400000000000000, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1694.145760][   T27] audit: type=1804 audit(1578807435.543:2047): pid=3719 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/748/file0" dev="sda1" ino=17089 res=1
[ 1694.530128][   T27] audit: type=1804 audit(1578807435.923:2048): pid=3719 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/748/file0" dev="sda1" ino=17089 res=1
05:37:17 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009})
write$cgroup_subtree(r1, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:17 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:17 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3700]})

05:37:17 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:17 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4000000000000000, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1696.479642][   T27] audit: type=1804 audit(1578807437.873:2049): pid=3735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/749/file0" dev="sda1" ino=17230 res=1
05:37:17 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:18 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3800]})

05:37:18 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:18 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:18 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3900]})

05:37:18 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:18 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

[ 1697.217584][   T27] audit: type=1804 audit(1578807438.613:2050): pid=3735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/749/file0" dev="sda1" ino=17230 res=1
05:37:19 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x8000000000000000, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:19 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3a00]})

05:37:19 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbfe1, 0x9}}, 0x0, 0x9, 0xffffffffffffffff, 0x3)
fcntl$setstatus(r1, 0x4, 0x42800)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000000002)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000280))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000000280))
ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000600)={0x0, 0x1, 0x4, 0x8, 0x7fff, {0x77359400}, {0x5, 0xc, 0x7, 0x3, 0x5, 0x3f, "3938c208"}, 0x3, 0x4, @fd=r7, 0x400, 0x0, <r8=>r0})
ioctl$SIOCGETNODEID(r8, 0x89e1, &(0x7f0000000680)={0x1})
r9 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000280))
r10 = fcntl$dupfd(r2, 0x406, r9)
ioctl$TCGETS(r10, 0x5401, &(0x7f00000000c0))
r11 = getpid()
get_robust_list(r11, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f0000000100), 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000240)=0x18)

05:37:19 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:19 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

[ 1697.847688][   T27] audit: type=1804 audit(1578807439.243:2051): pid=3783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/750/file0" dev="sda1" ino=17245 res=1
05:37:19 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:19 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3b00]})

05:37:19 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x400, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000280))
ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000180))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x3, <r3=>0x0, 0x1, 0x3ff})
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000140)={0x5499, r3, 0x0, 0x2})
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3db79be645f3de, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r5 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r5, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:19 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

[ 1698.115901][   T27] audit: type=1804 audit(1578807439.513:2052): pid=3803 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/964/file0" dev="sda1" ino=17247 res=1
05:37:19 executing program 5:
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:19 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:19 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3c00]})

[ 1698.549076][   T27] audit: type=1804 audit(1578807439.943:2053): pid=3783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/750/file0" dev="sda1" ino=17245 res=1
05:37:20 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0xfffffffffffff000, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:20 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3d00]})

05:37:20 executing program 5:
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:20 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:20 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
open(0x0, 0x0, 0x384)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000280))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r6)
r7 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x4, 0x2)
poll(&(0x7f0000000100)=[{r2, 0xa108}, {r0, 0x10}, {}, {r4, 0x502}, {0xffffffffffffffff, 0x60b0}, {r5, 0x200}, {r0, 0x4}, {r0, 0x2011}, {r6, 0x8a77908c65f2b4ff}, {r7, 0x10}], 0xa, 0x9960)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:20 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='/dev/snapshot\x00', &(0x7f0000000240)='%-^selinux]system!keyring\x00', 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0xc, 0x16, [{0x8, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x42400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40000, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{}]})
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r6 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
pwrite64(r1, &(0x7f0000000040), 0x0, 0x4)
ioctl$TCSBRK(r4, 0x5409, 0x51d9)
perf_event_open(0x0, 0x0, 0xfffffdfffffffffd, r6, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x40010, 0xffffffffffffffff, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r8, 0x80081272, &(0x7f0000000280))
write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e0773afbc50040000000000000095c1"], 0x18)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
bind$unix(r1, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1699.142753][ T3849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
05:37:20 executing program 5:
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:20 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3e00]})

[ 1699.238438][   T27] audit: type=1804 audit(1578807440.633:2054): pid=3852 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/751/file0" dev="sda1" ino=17256 res=1
05:37:20 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
socket(0x10, 0x80002, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:20 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x440c04, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e23, 0xfffeffff, @mcast2, 0x8}}}, 0x84)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:21 executing program 5:
r0 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

[ 1699.604506][   T27] audit: type=1804 audit(1578807441.003:2055): pid=3868 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/966/file0" dev="sda1" ino=17257 res=1
[ 1699.607571][ T3868] sctp: [Deprecated]: syz-executor.1 (pid 3868) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1699.607571][ T3868] Use struct sctp_sack_info instead
05:37:21 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3f00]})

[ 1700.015393][   T27] audit: type=1804 audit(1578807441.403:2056): pid=3852 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/751/file0" dev="sda1" ino=17256 res=1
05:37:21 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x402, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:21 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
socket(0x10, 0x80002, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:21 executing program 5:
r0 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:21 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000]})

[ 1700.609306][   T27] audit: type=1804 audit(1578807441.993:2057): pid=3868 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/966/file0" dev="sda1" ino=17257 res=1
[ 1700.634819][ T3888] sctp: [Deprecated]: syz-executor.1 (pid 3888) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1700.634819][ T3888] Use struct sctp_sack_info instead
[ 1700.733724][   T27] audit: type=1804 audit(1578807442.023:2058): pid=3904 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/752/file0" dev="sda1" ino=17256 res=1
[ 1701.108193][   T27] audit: type=1804 audit(1578807442.503:2059): pid=3904 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/752/file0" dev="sda1" ino=17256 res=1
05:37:23 executing program 5:
r0 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:23 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4100]})

05:37:23 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
socket(0x10, 0x80002, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:23 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:23 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x404, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:23 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000280))
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f00000000c0)=0x6)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x68580, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000340)={0x0, 0x80000, r1})
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r6)
getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000001c0)={@remote, @rand_addr, <r7=>0x0}, &(0x7f0000000200)=0xc)
ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0xc}, @ipv4={[], [], @multicast2}, @empty, 0x8, 0x7fff, 0x8000, 0x0, 0x9, 0x20020, r7})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000280))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = open(&(0x7f0000000400)='./file0\x00', 0x4, 0x2)
sendmsg$IPSET_CMD_HEADER(r9, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xe9c945454d52f15a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0xc, 0x6, 0xb00, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20020041}, 0x4004002)
r10 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000000280))
ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f00000003c0)={0x0, 0x81, 0x10000, &(0x7f0000000380)=0x40})
clock_gettime(0x0, &(0x7f0000000100)={<r11=>0x0, <r12=>0x0})
timerfd_settime(r4, 0x1, &(0x7f0000000140)={{r11, r12+10000000}, {0x77359400}}, &(0x7f0000000180))
fcntl$setstatus(r2, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:23 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4200]})

[ 1701.903439][   T27] audit: type=1804 audit(1578807443.293:2060): pid=3926 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/753/file0" dev="sda1" ino=17281 res=1
05:37:23 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

[ 1702.071627][   T27] audit: type=1804 audit(1578807443.343:2061): pid=3927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/967/file0" dev="sda1" ino=17280 res=1
05:37:23 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:23 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4300]})

[ 1702.296634][   T27] audit: type=1804 audit(1578807443.393:2062): pid=3930 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir754013441/syzkaller.CB5MNE/726/file0" dev="sda1" ino=17287 res=1
05:37:23 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:24 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:24 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4400]})

05:37:24 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:24 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:25 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0xc20000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:25 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4500]})

[ 1704.615808][   T27] kauditd_printk_skb: 1 callbacks suppressed
[ 1704.615829][   T27] audit: type=1804 audit(1578807446.013:2064): pid=3994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir754013441/syzkaller.CB5MNE/726/file0" dev="sda1" ino=17287 res=1
05:37:26 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4600]})

05:37:26 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x66c502, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r4, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x8, 0x3d, 0xe0}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000005}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @remote}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r6)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f00000003c0)=0x8)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1b, 0x13, "85af18a2bca1af947eaeb53602ece7c486b70f870e189b"}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x4)

05:37:26 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:26 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000003)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:26 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:26 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:26 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4700]})

[ 1705.090544][   T27] audit: type=1804 audit(1578807446.473:2065): pid=4006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/754/file0" dev="sda1" ino=17409 res=1
05:37:26 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:26 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:26 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4800]})

05:37:27 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:27 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0xca2d9282a329318d, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x25, &(0x7f00000001c0)={0x0, @in={{0x2, 0x20, @empty}}, 0x0, 0x1ff}, 0x9c)
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x920, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xedbd3072eb04849a}, 0x90)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x22008000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r5 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r5, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:27 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000), 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

[ 1705.996368][   T27] audit: type=1804 audit(1578807447.393:2066): pid=4040 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/969/file0" dev="sda1" ino=17279 res=1
[ 1706.949027][   T27] audit: type=1804 audit(1578807448.343:2067): pid=4010 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/754/file0" dev="sda1" ino=17409 res=1
05:37:29 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:29 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4900]})

05:37:29 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000), 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:29 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)
setsockopt$inet6_dccp_int(r1, 0x21, 0x4, &(0x7f00000000c0)=0x8, 0x4)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:29 executing program 1:
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}})
r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r2)
keyctl$KEYCTL_MOVE(0x1e, r0, r2, 0xfffffffffffffffe, 0x1)
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x10, 0xffff, 0x1)
r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:29 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x2, 0x63f8f8e005887d3)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000003c0)={0x0, r4, 0xd4, 0x1ff, 0x4, 0x8001})
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000280))
write(r6, &(0x7f0000000100)="12678bce62848d1747b9ed6be60cd326ae5ca14ca0860579df5a74526f4239b9c028c820c27fdf4ae8bb423640eeea26b6796dc8b1a97551b8ac6d43f9640f719470c19cca8c84adfce561bfc00ce2e21f712d615ae89054743a4e371d6c375effb3c8936741bb03972d7f54ccb34c70a7d9db2dcddf89e8d8b10ae472f14de805d4b4e0234296fb720ca71a5f5d6fadd089f8a06cee0bfa029a150a2256e3cdc6c482c30d82036935199d053ea0236a45c9450d0f4261ec7ce95b", 0xbb)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x8, 0x9000000, 0x3f, 0xe2, 0xffffffff, 0xfff9})

[ 1708.273488][   T27] audit: type=1804 audit(1578807449.663:2068): pid=4061 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/755/file0" dev="sda1" ino=17569 res=1
05:37:29 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000), 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:29 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4a00]})

05:37:29 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

[ 1708.365406][   T27] audit: type=1804 audit(1578807449.713:2069): pid=4060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/970/file0" dev="sda1" ino=17617 res=1
05:37:30 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:30 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4b00]})

05:37:30 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:30 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:30 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c00]})

05:37:30 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

[ 1710.863559][   T27] audit: type=1804 audit(1578807452.263:2070): pid=4061 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/755/file0" dev="sda1" ino=17569 res=1
05:37:33 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, 0x0, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:33 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet(0x2, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:33 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4d00]})

05:37:33 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x10d000, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/116, 0x2000, 0x800, 0x1, 0x1}, 0x20)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:33 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0xfffffffffffffffd, 0x0, 0x4}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000100)={0x3, 0x7, 0x0, 0x0, 0x4, 0x2})
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:33 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x271)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x5)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)
r2 = dup2(0xffffffffffffffff, r1)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
connect(r2, &(0x7f00000002c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-x86\x00'}, 0x80)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
chmod(&(0x7f00000001c0)='./file0\x00', 0xb9dae4679319a270)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000280))
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000200)=0x2)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:33 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4e00]})

[ 1712.484134][   T27] audit: type=1804 audit(1578807453.883:2071): pid=4130 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/971/file0" dev="sda1" ino=17722 res=1
05:37:34 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:34 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, 0x0, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

[ 1712.623293][   T27] audit: type=1804 audit(1578807453.943:2072): pid=4132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/756/file0" dev="sda1" ino=17723 res=1
05:37:34 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4f00]})

05:37:34 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, 0x0, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:34 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:34 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:34 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5000]})

[ 1713.133845][   T27] audit: type=1804 audit(1578807454.533:2073): pid=4132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/756/file0" dev="sda1" ino=17723 res=1
[ 1713.296105][   T27] audit: type=1804 audit(1578807454.573:2074): pid=4130 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/971/file0" dev="sda1" ino=17722 res=1
05:37:34 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:35 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x10440, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:35 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5100]})

05:37:35 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000280))
recvmsg$can_j1939(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/236, 0xec}, {&(0x7f00000002c0)=""/189, 0xbd}, {&(0x7f0000000200)=""/96, 0x60}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/204, 0xcc}], 0x5}, 0x10001)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000280))
r5 = openat(r4, &(0x7f00000000c0)='./file0\x00', 0x480800, 0x40)
ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000000280))
ioctl$TUNSETNOCSUM(r7, 0x400454c8, 0x1)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:35 executing program 4:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x4)
fcntl$setstatus(r2, 0x4, 0x4400)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000280))
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x761f3696e46ebae2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000081}, 0x4000)
pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="8480850468838264c53234015c72f963149d4d32cb1b9bc089045cd392c05c82335dfd78ee783008192c8a7f45d6b33d347d109e93e29188c710dc7cb10a6f26aa3d006e906b16f0cc05e988cd27890d3f609678c90a1d1bbb9ae05f607f1dec5ac0dc1aff04", 0x66}], 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:35 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

[ 1713.836635][   T27] audit: type=1804 audit(1578807455.233:2075): pid=4183 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/757/file0" dev="sda1" ino=17730 res=1
05:37:35 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:35 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5200]})

05:37:35 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:35 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5300]})

05:37:35 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:36 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5400]})

05:37:36 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

[ 1715.245186][   T27] audit: type=1804 audit(1578807456.643:2076): pid=4188 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/757/file0" dev="sda1" ino=17730 res=1
05:37:37 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5500]})

05:37:37 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:38 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:38 executing program 4:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80040, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000180)={@initdev, @multicast1, <r3=>0x0}, &(0x7f00000001c0)=0xfffffdab)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000100)={0x40, 0x1000})
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x10205, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000240), &(0x7f0000000440)=0x4)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000380)={@ll={0x11, 0x19, r3, 0x1, 0x20, 0x6, @remote}, {&(0x7f00000002c0)=""/174, 0xae}, &(0x7f0000000200), 0x16e26f9e1f71945a}, 0xa0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:38 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000280))
r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe)
lstat(&(0x7f0000000940)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=<r6=>0x0)
keyctl$chown(0x4, r4, r5, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r8, 0x80081272, &(0x7f0000000280))
ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000200)=<r9=>0x0)
statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1000, 0x100, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r11, 0x0, r11)
fstat(r11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, <r14=>0x0}, &(0x7f0000000280)=0x5)
setuid(r14)
r15 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000240)={0x0, <r16=>0x0}, &(0x7f0000000280)=0x5)
setuid(r16)
mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x12, &(0x7f0000000440)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0xffff}}], [{@uid_eq={'uid', 0x3d, r9}}, {@fowner_lt={'fowner<', r10}}, {@fowner_eq={'fowner', 0x3d, r12}}, {@appraise='appraise'}, {@audit='audit'}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r14}}, {@fowner_gt={'fowner>', r16}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0xfffff000)
r17 = socket$inet6_sctp(0xa, 0x1, 0x84)
r18 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r18, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r19=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r17, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r19}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r19, 0x1}, 0x8)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:38 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:38 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5600]})

05:37:38 executing program 0:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r0 = socket(0x10, 0x80002, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(0xffffffffffffffff, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)

[ 1717.015440][   T27] audit: type=1804 audit(1578807458.413:2077): pid=4248 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/973/file0" dev="sda1" ino=16913 res=1
05:37:38 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5700]})

05:37:38 executing program 0:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r0 = socket(0x10, 0x80002, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(0xffffffffffffffff, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)

[ 1717.145107][   T27] audit: type=1804 audit(1578807458.483:2078): pid=4252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/758/file0" dev="sda1" ino=17009 res=1
05:37:38 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:38 executing program 0:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r0 = socket(0x10, 0x80002, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(0xffffffffffffffff, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)

05:37:38 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5800]})

[ 1717.604461][ T4248] sctp: [Deprecated]: syz-executor.1 (pid 4248) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1717.604461][ T4248] Use struct sctp_sack_info instead
05:37:39 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5900]})

05:37:39 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

[ 1717.879635][   T27] audit: type=1804 audit(1578807459.273:2079): pid=4256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/758/file0" dev="sda1" ino=17009 res=1
05:37:39 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:39 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:39 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5a00]})

05:37:39 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x101080, 0x2f3d9c9e11fe72f4)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000280))
ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000100)=0x2)

05:37:39 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4a61, 0x6}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
madvise(&(0x7f0000165000/0x4000)=nil, 0x4000, 0x66)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x141040, 0x0)
dup2(r1, r2)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3)
ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f00000000c0)={0x20, 0x37ddee25, 0x9, 0x10000, 0x4, 0x40})

05:37:39 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, 0x0, &(0x7f0000001140))
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

[ 1718.198285][   T27] audit: type=1804 audit(1578807459.593:2080): pid=4302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/974/file0" dev="sda1" ino=16817 res=1
05:37:39 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5b00]})

[ 1718.317445][   T27] audit: type=1804 audit(1578807459.663:2081): pid=4306 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/759/file0" dev="sda1" ino=16913 res=1
05:37:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5c00]})

[ 1718.611127][   T27] audit: type=1804 audit(1578807460.013:2082): pid=4320 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/974/file0" dev="sda1" ino=16817 res=1
05:37:40 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, 0x0, &(0x7f0000001140))
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5d00]})

05:37:40 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:40 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x54)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab54b2a97c17e985, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000200))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x21)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000140)={0x2, "c0bc57e56a7af705b5d48c14c4c149bad1ff87ccd88c7e26e399fe9af82a48af", 0x2, 0x800, 0x81, 0x7, 0x5df0ee931de5be5c, 0x2, 0xfffffff9, 0x5})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1719.199040][   T27] audit: type=1804 audit(1578807460.593:2083): pid=4330 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/759/file0" dev="sda1" ino=16913 res=1
[ 1719.342938][   T27] audit: type=1804 audit(1578807460.743:2084): pid=4340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/975/file0" dev="sda1" ino=16648 res=1
[ 1719.690550][   T27] audit: type=1804 audit(1578807461.093:2085): pid=4340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/975/file0" dev="sda1" ino=16648 res=1
05:37:42 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, 0x0, &(0x7f0000001140))
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5e00]})

05:37:42 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000280))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, r1, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x5b0f15b6559332f3, 0x0)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000100)={0x60, 0x5, 0x100, 0xfffa, 0x1000, 0x5, &(0x7f00000002c0)="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"})
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:42 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000280))
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5}, &(0x7f0000000140)=0x8)
sendmsg$inet_sctp(r2, &(0x7f0000000200)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x9, @remote, 0x4}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)="656a29953165c35b96668cde7f716536c013bb836b875bab734852dfbf0d7837e31c3a40f3e9f82093dab9c36aa1dbf1c1b538dc16fd7fda570d740293a4fdc7b9ca75c0d79b7d8cdab02fe43c520b8929119af7df700a393ca7eb02821771e608cc19c471ce79ff5a0f43b0fbc46f6d2067d205168ee06e342bcbd3f28518a8b2361af0c390d5d764cb22b8738b909e5539a8a8e6212f1571b92bddc56dcb93a600e24849bc18f1373e6ddf", 0xac}], 0x1, &(0x7f00000002c0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x7b2}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @init={0x18, 0x84, 0x0, {0x4, 0x1, 0x8, 0x8}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x7, 0x8, 0x4, 0x7, 0x8, 0x40, 0xd77, r5}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x1818}}], 0xa8, 0x4000000}, 0x40000080)

05:37:42 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:42 executing program 3:
syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = open(0x0, 0x0, 0x0)
getsockopt(r1, 0xffffffff, 0x101, &(0x7f00000000c0)=""/102, &(0x7f0000000140)=0x66)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1720.666782][   T27] audit: type=1804 audit(1578807462.063:2086): pid=4362 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/976/file0" dev="sda1" ino=17169 res=1
05:37:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5f00]})

05:37:42 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, 0x0)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6000]})

05:37:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6100]})

05:37:42 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, 0x0)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:42 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000280))
ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)=0x7ff)

05:37:43 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:43 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6200]})

05:37:43 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6300]})

[ 1722.412835][ T4365] sctp: [Deprecated]: syz-executor.4 (pid 4365) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1722.412835][ T4365] Use struct sctp_sack_info instead
05:37:44 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
futimesat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0x7530}, {0x77359400}})
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:44 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, 0x0)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0)

05:37:44 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x80010, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:44 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6400]})

05:37:44 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:44 executing program 1:
r0 = syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x1000, 0x3, 0x4, 0x70000, 0x75f, {0x77359400}, {0x2, 0xc, 0x4, 0x3, 0xf9, 0x1, "c3c092c8"}, 0x7f, 0x4, @offset=0x7a, 0x5, 0x0, <r2=>0xffffffffffffffff})
ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000140))
fcntl$setstatus(r1, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000200), &(0x7f0000000240)=0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)
r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r4)
ioctl$TCSETSF(r4, 0x5404, &(0x7f00000002c0)={0x200, 0x7fff, 0x2, 0x9, 0x5, "d6e34b4f587d4ba81b012524e0647e3bfcf284"})
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f00000001c0))

05:37:44 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[ 1723.530251][   T27] kauditd_printk_skb: 2 callbacks suppressed
[ 1723.530270][   T27] audit: type=1804 audit(1578807464.903:2089): pid=4427 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/761/file0" dev="sda1" ino=17234 res=1
[ 1723.679473][   T27] audit: type=1804 audit(1578807465.073:2090): pid=4435 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/978/file0" dev="sda1" ino=17317 res=1
05:37:45 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6500]})

05:37:45 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000280))
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={<r4=>r0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000402}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@dellink={0x38, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2, 0x1}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x7}, @IFLA_IF_NETNSID={0x8, 0x2e, 0x4}]}, 0x38}}, 0x4000000)
fcntl$setstatus(r1, 0x4, 0x42000)
open(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0x80, 0x20, 0x8})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:45 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

05:37:45 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6600]})

05:37:45 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6700]})

[ 1725.016168][   T27] audit: type=1804 audit(1578807466.413:2091): pid=4428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/761/file0" dev="sda1" ino=17234 res=1
05:37:46 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000280))
ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x8000, 0x0, 0x1, "053ad2ff3d414e8498c5ef675d607b77f09cb123324465f49964123a8625a709", 0x56595559})
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

05:37:46 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:46 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

05:37:46 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6800]})

05:37:46 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17)
r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6900]})

[ 1725.365296][   T27] audit: type=1804 audit(1578807466.763:2092): pid=4485 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/762/file0" dev="sda1" ino=17339 res=1
05:37:47 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0)
close(r0)

05:37:47 executing program 5:
r0 = socket$inet6(0xa, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000002180)=""/4086, &(0x7f0000001140)=0x11b2)
mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x10, 0xffffffffffffffff, 0x0)

05:37:47 executing program 1:
syz_open_dev$vbi(0x0, 0x1, 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
eventfd(0x0)
fallocate(0xffffffffffffffff, 0x48, 0x8001, 0x1)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x400, 0x2000000000002)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4e0001, 0x0)

[ 1726.487878][   T27] audit: type=1804 audit(1578807467.883:2093): pid=4511 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir170614446/syzkaller.UlXAbz/979/file0" dev="sda1" ino=17326 res=1
[ 1726.948915][   T27] audit: type=1804 audit(1578807468.343:2094): pid=4490 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir066017194/syzkaller.H6Fh3r/762/file0" dev="sda1" ino=17339 res=1
[ 1727.025066][ T4514] ==================================================================
[ 1727.033399][ T4514] BUG: KCSAN: data-race in lru_add_drain_all / pagevec_lru_move_fn
[ 1727.041405][ T4514] 
[ 1727.043765][ T4514] read to 0xffff88812c0299e0 of 1 bytes by task 4515 on cpu 1:
[ 1727.051611][ T4514]  lru_add_drain_all+0x17e/0x3d0
[ 1727.056563][ T4514]  migrate_prep+0x17/0x20
[ 1727.061015][ T4514]  do_mbind+0x302/0xa40
[ 1727.065178][ T4514]  kernel_mbind+0x111/0x130
[ 1727.069786][ T4514]  __x64_sys_mbind+0x89/0xb0
[ 1727.074397][ T4514]  do_syscall_64+0xcc/0x3a0
[ 1727.078909][ T4514]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1727.085023][ T4514] 
[ 1727.087363][ T4514] write to 0xffff88812c0299e0 of 1 bytes by task 4514 on cpu 0:
[ 1727.095700][ T4514]  pagevec_lru_move_fn+0x163/0x180
[ 1727.100817][ T4514]  lru_add_drain_cpu+0x178/0x2e0
[ 1727.105757][ T4514]  lru_add_drain+0x35/0x80
[ 1727.110181][ T4514]  follow_page_pte+0xb3e/0xd20
[ 1727.114949][ T4514]  follow_page_mask+0x7b0/0x1100
[ 1727.119888][ T4514]  __get_user_pages+0x3a0/0x1130
[ 1727.125089][ T4514]  populate_vma_page_range+0xe6/0x100
[ 1727.130603][ T4514]  __mm_populate+0x168/0x2a0
[ 1727.135283][ T4514]  vm_mmap_pgoff+0x181/0x190
[ 1727.140212][ T4514]  ksys_mmap_pgoff+0x99/0x420
[ 1727.144900][ T4514]  __x64_sys_mmap+0x2e/0x40
[ 1727.149684][ T4514]  do_syscall_64+0xcc/0x3a0
[ 1727.154439][ T4514]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1727.160693][ T4514] 
[ 1727.163024][ T4514] Reported by Kernel Concurrency Sanitizer on:
[ 1727.169182][ T4514] CPU: 0 PID: 4514 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0
[ 1727.177857][ T4514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1727.187940][ T4514] ==================================================================
[ 1727.196000][ T4514] Kernel panic - not syncing: panic_on_warn set ...
[ 1727.202733][ T4514] CPU: 0 PID: 4514 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0
[ 1727.211406][ T4514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1727.221800][ T4514] Call Trace:
[ 1727.225246][ T4514]  dump_stack+0x11d/0x181
[ 1727.229584][ T4514]  panic+0x210/0x640
[ 1727.233669][ T4514]  ? vprintk_func+0x8d/0x140
[ 1727.238405][ T4514]  kcsan_report.cold+0xc/0xd
[ 1727.243013][ T4514]  kcsan_setup_watchpoint+0x3fe/0x460
[ 1727.248413][ T4514]  __tsan_unaligned_write1+0xc3/0x100
[ 1727.253998][ T4514]  pagevec_lru_move_fn+0x163/0x180
[ 1727.260047][ T4514]  ? put_pages_list+0x1c0/0x1c0
[ 1727.265830][ T4514]  lru_add_drain_cpu+0x178/0x2e0
[ 1727.271488][ T4514]  lru_add_drain+0x35/0x80
[ 1727.276166][ T4514]  follow_page_pte+0xb3e/0xd20
[ 1727.282647][ T4514]  follow_page_mask+0x7b0/0x1100
[ 1727.288035][ T4514]  __get_user_pages+0x3a0/0x1130
[ 1727.293359][ T4514]  populate_vma_page_range+0xe6/0x100
[ 1727.298843][ T4514]  __mm_populate+0x168/0x2a0
[ 1727.303646][ T4514]  vm_mmap_pgoff+0x181/0x190
[ 1727.308570][ T4514]  ksys_mmap_pgoff+0x99/0x420
[ 1727.313457][ T4514]  ? debug_smp_processor_id+0x43/0x137
[ 1727.319029][ T4514]  __x64_sys_mmap+0x2e/0x40
[ 1727.323866][ T4514]  do_syscall_64+0xcc/0x3a0
[ 1727.328908][ T4514]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1727.335424][ T4514] RIP: 0033:0x45af49
[ 1727.344983][ T4514] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1727.365420][ T4514] RSP: 002b:00007f61cb17dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1727.374157][ T4514] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045af49
[ 1727.382219][ T4514] RDX: 0000000002000107 RSI: 0000000000600000 RDI: 00000000209fd000
[ 1727.390291][ T4514] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000
[ 1727.398453][ T4514] R10: 0000000000006031 R11: 0000000000000246 R12: 00007f61cb17e6d4
[ 1727.406614][ T4514] R13: 00000000004c83ce R14: 00000000004e0560 R15: 00000000ffffffff
[ 1727.423964][ T4514] Kernel Offset: disabled
[ 1727.428453][ T4514] Rebooting in 86400 seconds..