ts\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1475.120467][ T27] audit: type=1804 audit(1564478525.671:1635): pid=30602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir977418664/syzkaller.2qutBg/3834/memory.events" dev="sda1" ino=16754 res=1 [ 1475.208655][ T27] audit: type=1800 audit(1564478525.671:1636): pid=30602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16754 res=0 09:22:06 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1475.234052][ T27] audit: type=1804 audit(1564478525.681:1637): pid=30606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir341603460/syzkaller.Zs40bL/1564/memory.events" dev="sda1" ino=16577 res=1 [ 1475.263559][ T27] audit: type=1800 audit(1564478525.681:1638): pid=30606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16577 res=0 09:22:06 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1475.330779][ T27] audit: type=1804 audit(1564478525.781:1639): pid=30610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=16982 res=1 09:22:06 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:06 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1475.456459][ T27] audit: type=1800 audit(1564478525.781:1640): pid=30610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16982 res=0 09:22:06 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1475.582402][ T27] audit: type=1804 audit(1564478525.881:1641): pid=30611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir034701233/syzkaller.bA8xpA/4124/memory.events" dev="sda1" ino=16984 res=1 09:22:06 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1475.743964][ T27] audit: type=1800 audit(1564478525.881:1642): pid=30611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16984 res=0 09:22:06 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:06 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:06 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:06 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:06 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:06 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:07 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:07 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:07 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:07 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:07 executing program 3: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r2, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:07 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:07 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:07 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:07 executing program 3: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r2, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:07 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:07 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:07 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:08 executing program 3: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r2, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:08 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:08 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:08 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:08 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:08 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:08 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:08 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:08 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:08 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:08 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:08 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:08 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:08 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:09 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:09 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:09 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:09 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:09 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:09 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+mem'], 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:09 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x0) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:09 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:09 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:09 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:09 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:09 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+mem'], 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:09 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:09 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:10 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x0) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:10 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:10 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:10 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:10 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+mem'], 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:10 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:10 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x0) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:10 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:10 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x0) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1479.930306][ T27] kauditd_printk_skb: 86 callbacks suppressed [ 1479.930319][ T27] audit: type=1804 audit(1564478530.651:1729): pid=31574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=16625 res=1 09:22:10 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /'], 0xf) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:10 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1480.060963][ T27] audit: type=1800 audit(1564478530.681:1730): pid=31574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16625 res=0 09:22:10 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x0) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1480.166889][ T27] audit: type=1804 audit(1564478530.801:1731): pid=31680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir341603460/syzkaller.Zs40bL/1572/memory.events" dev="sda1" ino=17009 res=1 [ 1480.252317][ T27] audit: type=1800 audit(1564478530.801:1732): pid=31680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=17009 res=0 09:22:11 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1480.354515][ T27] audit: type=1804 audit(1564478530.861:1733): pid=31620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir977418664/syzkaller.2qutBg/3843/memory.events" dev="sda1" ino=16548 res=1 09:22:11 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1480.462588][ T27] audit: type=1800 audit(1564478530.871:1734): pid=31620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16548 res=0 09:22:11 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:11 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1480.631363][ T27] audit: type=1804 audit(1564478531.021:1735): pid=31713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=17011 res=1 [ 1480.772034][ T27] audit: type=1800 audit(1564478531.021:1736): pid=31713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17011 res=0 09:22:11 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:11 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1480.879110][ T27] audit: type=1804 audit(1564478531.111:1737): pid=31712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir005755139/syzkaller.Cl8OQ4/4027/memory.events" dev="sda1" ino=17004 res=1 [ 1480.944862][ T27] audit: type=1800 audit(1564478531.111:1738): pid=31712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=17004 res=0 09:22:11 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /'], 0xf) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:11 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:11 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:11 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:12 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:12 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:12 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:12 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:12 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /'], 0xf) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:12 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:12 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:12 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:12 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:12 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:12 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00'], 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:13 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:13 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:13 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:13 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:13 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00'], 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:13 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:13 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:13 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:13 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:13 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:13 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:13 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00'], 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:14 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:14 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:14 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:14 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:14 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:14 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:14 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:14 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00'], 0x13) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:14 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:14 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:14 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:14 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:14 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:14 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00'], 0x13) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:15 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:15 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:15 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:15 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00'], 0x13) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:15 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:15 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:15 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r2, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:15 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1484.972598][ T27] kauditd_printk_skb: 72 callbacks suppressed [ 1484.972613][ T27] audit: type=1804 audit(1564478535.681:1811): pid=32650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir005755139/syzkaller.Cl8OQ4/4035/memory.events" dev="sda1" ino=17030 res=1 09:22:15 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:15 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1485.113925][ T27] audit: type=1800 audit(1564478535.691:1812): pid=32650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=17030 res=0 09:22:15 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r2, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:15 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:15 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1485.297028][ T27] audit: type=1804 audit(1564478536.011:1813): pid=32761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir034701233/syzkaller.bA8xpA/4149/memory.events" dev="sda1" ino=16570 res=1 09:22:16 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r2, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1485.396237][ T27] audit: type=1800 audit(1564478536.051:1814): pid=32761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16570 res=0 09:22:16 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1485.474409][ T27] audit: type=1804 audit(1564478536.061:1815): pid=303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir977418664/syzkaller.2qutBg/3851/memory.events" dev="sda1" ino=17012 res=1 [ 1485.649353][ T27] audit: type=1800 audit(1564478536.061:1816): pid=303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=17012 res=0 09:22:16 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:16 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r2, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1485.736785][ T27] audit: type=1804 audit(1564478536.231:1817): pid=398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir341603460/syzkaller.Zs40bL/1582/memory.events" dev="sda1" ino=17047 res=1 [ 1485.831344][ T27] audit: type=1800 audit(1564478536.231:1818): pid=398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=17047 res=0 09:22:16 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:16 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:16 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1485.939624][ T27] audit: type=1804 audit(1564478536.331:1819): pid=329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir005755139/syzkaller.Cl8OQ4/4036/memory.events" dev="sda1" ino=17043 res=1 [ 1486.019393][ T27] audit: type=1800 audit(1564478536.341:1820): pid=329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=17043 res=0 09:22:16 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:17 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:17 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:17 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:17 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:17 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:17 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:17 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:17 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:17 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:17 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:17 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:17 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:18 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:18 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:18 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:18 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:18 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:18 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:18 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:18 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:18 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:18 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:18 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:18 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:18 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:18 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:18 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:19 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:19 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:19 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:19 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:19 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:19 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:19 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:19 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:19 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:19 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:19 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:19 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:20 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:20 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:20 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:20 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:20 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() write$cgroup_pid(r2, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:20 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:20 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:20 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:20 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:20 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() write$cgroup_pid(r2, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1489.994817][ T27] kauditd_printk_skb: 83 callbacks suppressed [ 1489.994832][ T27] audit: type=1804 audit(1564478540.711:1904): pid=1484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir034701233/syzkaller.bA8xpA/4163/memory.events" dev="sda1" ino=17049 res=1 09:22:20 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:20 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:20 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1490.165818][ T27] audit: type=1800 audit(1564478540.711:1905): pid=1484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=17049 res=0 09:22:20 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1490.236043][ T27] audit: type=1804 audit(1564478540.751:1906): pid=1485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=17050 res=1 09:22:21 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1490.311880][ T27] audit: type=1800 audit(1564478540.751:1907): pid=1485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17050 res=0 [ 1490.445695][ T27] audit: type=1804 audit(1564478540.781:1908): pid=1479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir341603460/syzkaller.Zs40bL/1589/memory.events" dev="sda1" ino=17012 res=1 09:22:21 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() write$cgroup_pid(r2, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1490.494437][ T27] audit: type=1800 audit(1564478540.781:1909): pid=1479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=17012 res=0 [ 1490.527244][ T27] audit: type=1804 audit(1564478540.931:1910): pid=1490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir977418664/syzkaller.2qutBg/3859/memory.events" dev="sda1" ino=17044 res=1 [ 1490.565192][ T27] audit: type=1800 audit(1564478540.931:1911): pid=1490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=17044 res=0 [ 1490.593895][ T27] audit: type=1804 audit(1564478540.941:1912): pid=1527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir034701233/syzkaller.bA8xpA/4164/memory.events" dev="sda1" ino=17032 res=1 [ 1490.654422][ T27] audit: type=1800 audit(1564478540.941:1913): pid=1527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=17032 res=0 09:22:21 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:21 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:21 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() write$cgroup_pid(r2, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:21 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:21 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:21 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:21 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:22 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:22 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:22 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:22 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:22 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:22 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:22 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:22 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:22 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:22 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:22 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:22 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:22 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:22 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:23 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:23 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:23 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:23 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:23 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:23 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:23 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:23 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:23 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:23 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:23 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:23 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:23 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:23 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:24 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:24 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:24 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:24 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:24 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:24 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:24 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:24 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:24 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:24 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:24 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:24 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:24 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:25 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:25 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:25 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:25 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:25 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:25 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a0f, 0x1700) 09:22:25 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:25 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:25 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:25 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:25 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:25 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:25 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a0f, 0x1700) [ 1495.158891][ T27] kauditd_printk_skb: 84 callbacks suppressed [ 1495.158906][ T27] audit: type=1804 audit(1564478545.871:1998): pid=2909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir034701233/syzkaller.bA8xpA/4177/memory.events" dev="sda1" ino=17001 res=1 09:22:26 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:26 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:26 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1495.362604][ T27] audit: type=1800 audit(1564478545.881:1999): pid=2909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=17001 res=0 [ 1495.519589][ T27] audit: type=1804 audit(1564478545.951:2000): pid=2919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=16565 res=1 09:22:26 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1495.695857][ T27] audit: type=1800 audit(1564478545.951:2001): pid=2919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16565 res=0 09:22:26 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:26 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:26 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a0f, 0x1700) [ 1495.727765][ T27] audit: type=1804 audit(1564478545.961:2002): pid=2912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir005755139/syzkaller.Cl8OQ4/4052/memory.events" dev="sda1" ino=16570 res=1 [ 1495.799382][ T27] audit: type=1800 audit(1564478545.961:2003): pid=2912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16570 res=0 09:22:26 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1495.883257][ T27] audit: type=1804 audit(1564478546.071:2004): pid=2920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir341603460/syzkaller.Zs40bL/1599/memory.events" dev="sda1" ino=16525 res=1 [ 1495.976199][ T27] audit: type=1800 audit(1564478546.071:2005): pid=2920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16525 res=0 09:22:26 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1496.086068][ T27] audit: type=1804 audit(1564478546.351:2006): pid=3028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=17000 res=1 09:22:26 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1496.192215][ T27] audit: type=1800 audit(1564478546.351:2007): pid=3028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17000 res=0 09:22:27 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:27 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:27 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a0f, 0x1700) 09:22:27 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:27 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:27 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:27 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:27 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:27 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:27 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:27 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:27 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:27 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() write$cgroup_pid(r2, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:27 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:28 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:28 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:28 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:28 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:28 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:28 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00ry -pids -pids +cpu '], 0x27) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:28 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:28 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:28 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000002c0)={@remote, 0x19}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) socket$inet6(0xa, 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x100) 09:22:28 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:28 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:28 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:28 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaa000180c2000000000c0000000000000000b311840884e95988b92e0b1034a2b880969daaebc9d218276b054d34a3bcbb31459823a50993f7703e1a83e8280b7553ceb96944d28cc41cf075e3d99c445ca9f6a37e9f64c8ddecf57f000000000000007e6e1887ac13604c3d00980f6f13145b785c38dd4ac675a5f84c97723975b6587bf804ff58a2cc04d45d84"], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 09:22:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) close(r1) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) tee(r1, r2, 0x401, 0x0) 09:22:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, 0x0) 09:22:29 executing program 4: r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000003600)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @remote}}}], 0x20}}], 0x1, 0x0) 09:22:29 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:29 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:29 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000005c0), 0x1000) 09:22:29 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000002c0)={@remote, 0x19}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x100) 09:22:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000130009006900000000000000ab008048060000004600010707000014190001001000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) 09:22:29 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:29 executing program 4: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) munlockall() 09:22:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getpgrp(0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) syslog(0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0xca) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setfsuid(0x0) 09:22:29 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:29 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:29 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getpgrp(0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) syslog(0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0xca) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setfsuid(0x0) 09:22:29 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) chroot(0x0) 09:22:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) 09:22:29 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:29 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) 09:22:29 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000100)) 09:22:30 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:30 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:30 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 09:22:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x1000000004e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r0, &(0x7f000000bc00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="dd", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000000b80)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003e40)="f8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000007980)=[{&(0x7f0000005500)='$', 0x1}], 0x1}}], 0x4, 0x4000000) 09:22:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x19) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x9, 0x11b}) syz_open_procfs(0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) 09:22:30 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:30 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:30 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r2) close(r3) pipe(&(0x7f00000002c0)) splice(r0, 0x0, r3, 0x0, 0x4, 0x0) 09:22:30 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xe78f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 09:22:30 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:30 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:30 executing program 1: open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x0) 09:22:30 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:30 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002000)="153b48d2a65e40e12035b78d0ace1000c124a87a56f8cb736d22c85ff260737660f51dae4cca5f37ce084a45b4c3f7981418bd06d78999fadc0c5eb52db9ae1a4dd9fdddc72d744d842eb39e64e29b7602f92862398c0f006c5802f2a6199564ed8ee07a57dd8e5c72a9d22540b8db8c19f00b01ad25d4dfd24f0b6c7b96df85879b3eff8c6c395ed52b84cd156796f1f84bc40b71ed4d4520c0", 0x9a}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:30 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:30 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:30 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1500.220728][ T27] kauditd_printk_skb: 80 callbacks suppressed [ 1500.220742][ T27] audit: type=1326 audit(1564478550.931:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x7ffc0000 09:22:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xe6bf, 0x0, [{0x0, 0x5}]}}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:31 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:31 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1500.356632][ T27] audit: type=1326 audit(1564478550.941:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459829 code=0x7ffc0000 09:22:31 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1500.490668][ T27] audit: type=1326 audit(1564478550.941:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459829 code=0x7ffc0000 09:22:31 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1500.606561][ T27] audit: type=1326 audit(1564478550.941:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x7ffc0000 09:22:31 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:31 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:31 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1500.764018][ T27] audit: type=1326 audit(1564478550.941:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=54 compat=0 ip=0x459829 code=0x7ffc0000 [ 1500.876221][ T27] audit: type=1326 audit(1564478550.951:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x7ffc0000 [ 1500.941716][ T27] audit: type=1326 audit(1564478550.951:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459829 code=0x7ffc0000 [ 1501.000006][ T27] audit: type=1326 audit(1564478550.951:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459829 code=0x7ffc0000 [ 1501.028215][ T27] audit: type=1804 audit(1564478551.061:2096): pid=4200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=16945 res=1 [ 1501.072937][ T27] audit: type=1800 audit(1564478551.071:2097): pid=4200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16945 res=0 09:22:31 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002000)="153b48d2a65e40e12035b78d0ace1000c124a87a56f8cb736d22c85ff260737660f51dae4cca5f37ce084a45b4c3f7981418bd06d78999fadc0c5eb52db9ae1a4dd9fdddc72d744d842eb39e64e29b7602f92862398c0f006c5802f2a6199564ed8ee07a57dd8e5c72a9d22540b8db8c19f00b01ad25d4dfd24f0b6c7b96df85879b3eff8c6c395ed52b84cd156796f1f84bc40b71ed4d4520c0", 0x9a}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:31 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:31 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xe6bf, 0x0, [{0x0, 0x5}]}}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:31 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:32 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:32 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:32 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xe6bf, 0x0, [{0x0, 0x5}]}}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:32 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:32 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:32 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002000)="153b48d2a65e40e12035b78d0ace1000c124a87a56f8cb736d22c85ff260737660f51dae4cca5f37ce084a45b4c3f7981418bd06d78999fadc0c5eb52db9ae1a4dd9fdddc72d744d842eb39e64e29b7602f92862398c0f006c5802f2a6199564ed8ee07a57dd8e5c72a9d22540b8db8c19f00b01ad25d4dfd24f0b6c7b96df85879b3eff8c6c395ed52b84cd156796f1f84bc40b71ed4d4520c0", 0x9a}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:32 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:32 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:32 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xe6bf, 0x0, [{0x0, 0x5}]}}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:32 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:32 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:32 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xe6bf, 0x0, [{0x0, 0x5}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:33 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:33 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:33 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:33 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002000)="153b48d2a65e40e12035b78d0ace1000c124a87a56f8cb736d22c85ff260737660f51dae4cca5f37ce084a45b4c3f7981418bd06d78999fadc0c5eb52db9ae1a4dd9fdddc72d744d842eb39e64e29b7602f92862398c0f006c5802f2a6199564ed8ee07a57dd8e5c72a9d22540b8db8c19f00b01ad25d4dfd24f0b6c7b96df85879b3eff8c6c395ed52b84cd156796f1f84bc40b71ed4d4520c0", 0x9a}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:33 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:33 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:33 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xe6bf, 0x0, [{0x0, 0x5}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:33 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xe6bf, 0x0, [{0x0, 0x5}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:33 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:33 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:33 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:34 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:34 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002000)="153b48d2a65e40e12035b78d0ace1000c124a87a56f8cb736d22c85ff260737660f51dae4cca5f37ce084a45b4c3f7981418bd06d78999fadc0c5eb52db9ae1a4dd9fdddc72d744d842eb39e64e29b7602f92862398c0f006c5802f2a6199564ed8ee07a57dd8e5c72a9d22540b8db8c19f00b01ad25d4dfd24f0b6c7b96df85879b3eff8c6c395ed52b84cd156796f1f84bc40b71ed4d4520c0", 0x9a}], 0x1}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:34 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:34 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:34 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:22:34 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:34 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000200)}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:22:34 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:34 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000200)}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:34 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002000)="153b48d2a65e40e12035b78d0ace1000c124a87a56f8cb736d22c85ff260737660f51dae4cca5f37ce084a45b4c3f7981418bd06d78999fadc0c5eb52db9ae1a4dd9fdddc72d744d842eb39e64e29b7602f92862398c0f006c5802f2a6199564ed8ee07a57dd8e5c72a9d22540b8db8c19f00b01ad25d4dfd24f0b6c7b96df85879b3eff8c6c395ed52b84cd156796f1f84bc40b71ed4d4520c0", 0x9a}], 0x1}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:34 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000200)}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:34 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:34 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:22:35 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002000)="153b48d2a65e40e12035b78d0ace1000c124a87a56f8cb736d22c85ff260737660f51dae4cca5f37ce084a45b4c3f7981418bd06d78999fadc0c5eb52db9ae1a4dd9fdddc72d744d842eb39e64e29b7602f92862398c0f006c5802f2a6199564ed8ee07a57dd8e5c72a9d22540b8db8c19f00b01ad25d4dfd24f0b6c7b96df85879b3eff8c6c395ed52b84cd156796f1f84bc40b71ed4d4520c0", 0x9a}], 0x1}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:35 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:35 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:35 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002000)="153b48d2a65e40e12035b78d0ace1000c124a87a56f8cb736d22c85ff260737660f51dae4cca5f37ce084a45b4c3f7981418bd06d78999fadc0c5eb52db9ae1a4dd9fdddc72d744d842eb39e64e29b7602f92862398c0f006c5802f2a6199564ed8ee07a57dd8e5c72a9d22540b8db8c19f00b01ad25d4dfd24f0b6c7b96df85879b3eff8c6c395ed52b84cd156796f1f84bc40b71ed4d4520c0", 0x9a}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:35 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:35 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:35 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:35 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:35 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:35 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x6}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:35 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:35 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:35 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:22:36 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:36 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002000)="153b48d2a65e40e12035b78d0ace1000c124a87a56f8cb736d22c85ff260737660f51dae4cca5f37ce084a45b4c3f7981418bd06d78999fadc0c5eb52db9ae1a4dd9fdddc72d744d842eb39e64e29b7602f92862398c0f006c5802f2a6199564ed8ee07a57dd8e5c72a9d22540b8db8c19f00b01ad25d4dfd24f0b6c7b96df85879b3eff8c6c395ed52b84cd156796f1f84bc40b71ed4d4520c0", 0x9a}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:36 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:22:36 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:36 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1505.652525][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 1505.652538][ T27] audit: type=1804 audit(1564478556.371:2156): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=17130 res=1 [ 1505.772317][ T27] audit: type=1800 audit(1564478556.411:2157): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17130 res=0 [ 1505.818666][ T27] audit: type=1804 audit(1564478556.471:2158): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir034701233/syzkaller.bA8xpA/4204/memory.events" dev="sda1" ino=17128 res=1 09:22:36 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x6}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:22:36 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1505.854137][ T27] audit: type=1800 audit(1564478556.481:2159): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=17128 res=0 09:22:36 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1505.967280][ T27] audit: type=1326 audit(1564478556.681:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=5618 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 [ 1506.135487][ T27] audit: type=1804 audit(1564478556.821:2161): pid=5628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=17129 res=1 09:22:36 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:36 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1506.212437][ T27] audit: type=1800 audit(1564478556.821:2162): pid=5628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17129 res=0 [ 1506.266082][ T27] audit: type=1804 audit(1564478556.831:2163): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir034701233/syzkaller.bA8xpA/4205/memory.events" dev="sda1" ino=17130 res=1 [ 1506.365315][ T27] audit: type=1800 audit(1564478556.831:2164): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=17130 res=0 [ 1506.521807][ T27] audit: type=1804 audit(1564478557.241:2165): pid=5633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=17130 res=1 09:22:37 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002000)="153b48d2a65e40e12035b78d0ace1000c124a87a56f8cb736d22c85ff260737660f51dae4cca5f37ce084a45b4c3f7981418bd06d78999fadc0c5eb52db9ae1a4dd9fdddc72d744d842eb39e64e29b7602f92862398c0f006c5802f2a6199564ed8ee07a57dd8e5c72a9d22540b8db8c19f00b01ad25d4dfd24f0b6c7b96df85879b3eff8c6c395ed52b84cd156796f1f84bc40b71ed4d4520c0", 0x9a}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:37 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x0, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:37 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:37 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:22:37 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:37 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x6}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 09:22:37 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:22:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:37 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x0, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:37 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:37 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:38 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002000)="153b48d2a65e40e12035b78d0ace1000c124a87a56f8cb736d22c85ff260737660f51dae4cca5f37ce084a45b4c3f7981418bd06d78999fadc0c5eb52db9ae1a4dd9fdddc72d744d842eb39e64e29b7602f92862398c0f006c5802f2a6199564ed8ee07a57dd8e5c72a9d22540b8db8c19f00b01ad25d4dfd24f0b6c7b96df85879b3eff8c6c395ed52b84cd156796f1f84bc40b71ed4d4520c0", 0x9a}], 0x1}}], 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:38 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x0, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:38 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:38 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:22:38 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20005f) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600800000008000000004000002000600ca3fabca000000ec38000000000000f7ffffffffffff1f0002000000000000000000008001000000000000000000040066ff0540050000000000040000000000000000310ff3eec1b0000c085355be1f44eb67671882c62c9537cbe32d00000000000000"], 0x78) close(r0) uselib(&(0x7f0000000140)='./file0\x00') 09:22:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:22:38 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:38 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:38 executing program 0: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102003ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='!vmnet1em0!#wlan0\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs$namespace(0x0, 0x0) pipe(&(0x7f00000001c0)) 09:22:38 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:39 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002000)="153b48d2a65e40e12035b78d0ace1000c124a87a56f8cb736d22c85ff260737660f51dae4cca5f37ce084a45b4c3f7981418bd06d78999fadc0c5eb52db9ae1a4dd9fdddc72d744d842eb39e64e29b7602f92862398c0f006c5802f2a6199564ed8ee07a57dd8e5c72a9d22540b8db8c19f00b01ad25d4dfd24f0b6c7b96df85879b3eff8c6c395ed52b84cd156796f1f84bc40b71ed4d4520c0", 0x9a}], 0x1}}], 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:22:39 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:39 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:39 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x8200) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 09:22:39 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x0, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:39 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000100100000100000077000000000000006d7dd00424e2bebeec3e7834bad0eeb0fb5f085afb8ae36feb97f25cb5c5d9d16bcc5e33bcfd8d169cb647b61f773fd9f96a822f5fffb3c43b08913f387d384b702fa62798e0b8738c456d4aad89c93890712342e610e44be77adf908d5936373008128a77f41e57b91a474a6f3a55d8a7720d732116476b5c99f50eba11e07b9aa74a1115e3d501ba1515fb6082ef2168834b2decf40da2bb57d8f05d434ac2a90872b77109bbd7397e25aeb82ad3d80101000000000000881f7798afd1a05ef6b720d5cfaffb3c806cb3fe0d1a0983af4698f160fb0d4b"], 0x18}}], 0x1, 0x0) 09:22:39 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {0x0}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:39 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) syz_open_dev$audion(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000100100000100000077000000000000006d7dd00424e2bebeec3e7834bad0eeb0fb5f085afb8ae36feb97f25cb5c5d9d16bcc5e33bcfd8d169cb647b61f773fd9f96a822f5fffb3c43b08913f387d384b702fa62798e0b8738c456d4aad89c93890712342e610e44be77adf908d5936373008128a77f41e57b91a474a6f3a55d8a7720d732116476b5c99f50eba11e07b9aa74a1115e3d501ba1515fb6082ef2168834b2decf40da2bb57d8f05d434ac2a90872b77109bbd7397e25aeb82ad3d80101000000000000881f7798afd1a05ef6b720d5cfaffb3c806cb3fe0d1a0983af4698f160fb0d4b"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000031c0), 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000001c0)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x69e}}], 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000480)=""/13, 0xd}, {&(0x7f0000000940)=""/71, 0x47}], 0x6, 0x0) 09:22:39 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002000)="153b48d2a65e40e12035b78d0ace1000c124a87a56f8cb736d22c85ff260737660f51dae4cca5f37ce084a45b4c3f7981418bd06d78999fadc0c5eb52db9ae1a4dd9fdddc72d744d842eb39e64e29b7602f92862398c0f006c5802f2a6199564ed8ee07a57dd8e5c72a9d22540b8db8c19f00b01ad25d4dfd24f0b6c7b96df85879b3eff8c6c395ed52b84cd156796f1f84bc40b71ed4d4520c0", 0x9a}], 0x1}}], 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:39 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x0, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) syz_open_dev$audion(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000100100000100000077000000000000006d7dd00424e2bebeec3e7834bad0eeb0fb5f085afb8ae36feb97f25cb5c5d9d16bcc5e33bcfd8d169cb647b61f773fd9f96a822f5fffb3c43b08913f387d384b702fa62798e0b8738c456d4aad89c93890712342e610e44be77adf908d5936373008128a77f41e57b91a474a6f3a55d8a7720d732116476b5c99f50eba11e07b9aa74a1115e3d501ba1515fb6082ef2168834b2decf40da2bb57d8f05d434ac2a90872b77109bbd7397e25aeb82ad3d80101000000000000881f7798afd1a05ef6b720d5cfaffb3c806cb3fe0d1a0983af4698f160fb0d4b"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000031c0), 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000001c0)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x69e}}], 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000480)=""/13, 0xd}, {&(0x7f0000000940)=""/71, 0x47}], 0x6, 0x0) 09:22:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:39 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:39 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x0, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:40 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {0x0}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:40 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) fstat(0xffffffffffffffff, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000003c0)=0x7, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') stat(0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) recvfrom$llc(r1, &(0x7f0000000580)=""/58, 0x3a, 0x2020, &(0x7f00000005c0)={0x1a, 0x119, 0x5, 0x9, 0x6, 0x8000, @random="6cfa0c33a5e9"}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm_plock\x00', 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="60004a85", @ANYRES16, @ANYBLOB="100026bd7000fedbdf25020000000800080000000000140009000000000000000000000000000000000114000900fe8000000000000000000000000000bb"], 0x44}, 0x1, 0x0, 0x0, 0x8841}, 0x20000000) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) 09:22:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:40 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:40 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {0x0}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) fstat(0xffffffffffffffff, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000003c0)=0x7, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') stat(0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) recvfrom$llc(r1, &(0x7f0000000580)=""/58, 0x3a, 0x2020, &(0x7f00000005c0)={0x1a, 0x119, 0x5, 0x9, 0x6, 0x8000, @random="6cfa0c33a5e9"}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm_plock\x00', 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="60004a85", @ANYRES16, @ANYBLOB="100026bd7000fedbdf25020000000800080000000000140009000000000000000000000000000000000114000900fe8000000000000000000000000000bb"], 0x44}, 0x1, 0x0, 0x0, 0x8841}, 0x20000000) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) 09:22:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:40 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:40 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:40 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/132, 0x84}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:41 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:41 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:41 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) syz_open_dev$audion(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000100100000100000077000000000000006d7dd00424e2bebeec3e7834bad0eeb0fb5f085afb8ae36feb97f25cb5c5d9d16bcc5e33bcfd8d169cb647b61f773fd9f96a822f5fffb3c43b08913f387d384b702fa62798e0b8738c456d4aad89c93890712342e610e44be77adf908d5936373008128a77f41e57b91a474a6f3a55d8a7720d732116476b5c99f50eba11e07b9aa74a1115e3d501ba1515fb6082ef2168834b2decf40da2bb57d8f05d434ac2a90872b77109bbd7397e25aeb82ad3d80101000000000000881f7798afd1a05ef6b720d5cfaffb3c806cb3fe0d1a0983af4698f160fb0d4b"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 09:22:41 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/132, 0x84}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1510.776121][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 1510.776139][ T27] audit: type=1804 audit(1564478561.491:2206): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir034701233/syzkaller.bA8xpA/4215/memory.events" dev="sda1" ino=16771 res=1 09:22:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1510.819047][ T27] audit: type=1800 audit(1564478561.531:2207): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16771 res=0 09:22:41 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) syz_open_dev$audion(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000100100000100000077000000000000006d7dd00424e2bebeec3e7834bad0eeb0fb5f085afb8ae36feb97f25cb5c5d9d16bcc5e33bcfd8d169cb647b61f773fd9f96a822f5fffb3c43b08913f387d384b702fa62798e0b8738c456d4aad89c93890712342e610e44be77adf908d5936373008128a77f41e57b91a474a6f3a55d8a7720d732116476b5c99f50eba11e07b9aa74a1115e3d501ba1515fb6082ef2168834b2decf40da2bb57d8f05d434ac2a90872b77109bbd7397e25aeb82ad3d80101000000000000881f7798afd1a05ef6b720d5cfaffb3c806cb3fe0d1a0983af4698f160fb0d4b"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 09:22:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:41 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) syz_open_dev$audion(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000100100000100000077000000000000006d7dd00424e2bebeec3e7834bad0eeb0fb5f085afb8ae36feb97f25cb5c5d9d16bcc5e33bcfd8d169cb647b61f773fd9f96a822f5fffb3c43b08913f387d384b702fa62798e0b8738c456d4aad89c93890712342e610e44be77adf908d5936373008128a77f41e57b91a474a6f3a55d8a7720d732116476b5c99f50eba11e07b9aa74a1115e3d501ba1515fb6082ef2168834b2decf40da2bb57d8f05d434ac2a90872b77109bbd7397e25aeb82ad3d80101000000000000881f7798afd1a05ef6b720d5cfaffb3c806cb3fe0d1a0983af4698f160fb0d4b"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 09:22:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:41 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1511.071667][ T27] audit: type=1804 audit(1564478561.781:2208): pid=6494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=17134 res=1 [ 1511.164424][ T27] audit: type=1800 audit(1564478561.821:2209): pid=6494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17134 res=0 09:22:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:42 executing program 0: r0 = socket(0x10, 0x4000000080803, 0x0) write(r0, &(0x7f0000000080)="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", 0xfc) 09:22:42 executing program 1: r0 = creat(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:42 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/132, 0x84}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:42 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1511.388312][ T6619] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1511.406261][ T27] audit: type=1804 audit(1564478562.121:2210): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir034701233/syzkaller.bA8xpA/4216/memory.events" dev="sda1" ino=17136 res=1 09:22:42 executing program 1: r0 = creat(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:42 executing program 0: r0 = gettid() r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x7f, 0x400, 0x80000001, 0x0, 0x6f8, 0x188, 0x0, 0x3, 0x7, 0x5, 0x0, 0x6, 0xfff, 0x7f, 0x5, 0x8, 0x0, 0x9, 0x10000, 0x3, 0xe1a5, 0x6, 0x8, 0xa6, 0x401, 0x0, 0x0, 0x80000000, 0x800000000000, 0x4, 0x9, 0x40, 0xab0b, 0x3ff, 0x3, 0x0, 0x1, 0x0, @perf_config_ext={0x5, 0x1}, 0x0, 0x2, 0x49494b1b, 0xf, 0x100000000, 0x80000001, 0x4}, r0, 0x8, r1, 0x1) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 1511.514925][ T27] audit: type=1800 audit(1564478562.121:2211): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=17136 res=0 09:22:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:42 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:42 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:42 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:42 executing program 1: r0 = creat(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1511.895310][ T27] audit: type=1804 audit(1564478562.611:2212): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir034701233/syzkaller.bA8xpA/4217/memory.events" dev="sda1" ino=17135 res=1 09:22:42 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:42 executing program 0: r0 = gettid() r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x7f, 0x400, 0x80000001, 0x0, 0x6f8, 0x188, 0x0, 0x3, 0x7, 0x5, 0x0, 0x6, 0xfff, 0x7f, 0x5, 0x8, 0x0, 0x9, 0x10000, 0x3, 0xe1a5, 0x6, 0x8, 0xa6, 0x401, 0x0, 0x0, 0x80000000, 0x800000000000, 0x4, 0x9, 0x40, 0xab0b, 0x3ff, 0x3, 0x0, 0x1, 0x0, @perf_config_ext={0x5, 0x1}, 0x0, 0x2, 0x49494b1b, 0xf, 0x100000000, 0x80000001, 0x4}, r0, 0x8, r1, 0x1) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 1512.038357][ T27] audit: type=1800 audit(1564478562.611:2213): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=17135 res=0 09:22:42 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1512.196472][ T27] audit: type=1804 audit(1564478562.791:2214): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=16769 res=1 09:22:43 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1512.401142][ T27] audit: type=1800 audit(1564478562.791:2215): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16769 res=0 09:22:43 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x0, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:43 executing program 0: setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) nanosleep(0x0, 0x0) lseek(0xffffffffffffffff, 0x20400000, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x3f000000}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x100000000000000]}}, r1}}, 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 09:22:43 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:43 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:43 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001540)=""/4096, 0x7756f4277d2c8648) 09:22:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:43 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000000)) 09:22:43 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x0, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:43 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:43 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:43 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:43 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x0, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x3da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=""/126, 0xb2}) writev(r0, &(0x7f0000000080), 0x5b) 09:22:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:22:44 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:44 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:44 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) 09:22:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:22:44 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:44 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:44 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:44 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) 09:22:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:22:44 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000400)={0x30003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:22:45 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:45 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x0) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:45 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:45 executing program 4: 09:22:45 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) 09:22:45 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x0) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:45 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:45 executing program 4: 09:22:45 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:45 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:45 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x0) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:45 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) 09:22:45 executing program 4: 09:22:46 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:46 executing program 4: 09:22:46 executing program 4: 09:22:46 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:46 executing program 4: 09:22:46 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:46 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 09:22:46 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) 09:22:46 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:46 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1516.078595][ T7487] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:22:46 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:47 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:47 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) 09:22:47 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) [ 1516.540334][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 1516.540347][ T27] audit: type=1804 audit(1564478567.251:2248): pid=7597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=17058 res=1 [ 1516.615413][ T27] audit: type=1800 audit(1564478567.261:2249): pid=7597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17058 res=0 [ 1516.727233][ T27] audit: type=1804 audit(1564478567.291:2250): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir034701233/syzkaller.bA8xpA/4228/memory.events" dev="sda1" ino=17151 res=1 [ 1516.843338][ T27] audit: type=1800 audit(1564478567.301:2251): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=17151 res=0 09:22:47 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100000033f322dccca141da2c279bb482499debd3b9c78967341e4c11d10000fa0975e390a2209482e0bcae8f3c9c04c3ddcebe3b02000000e1771fcd499897408f4e48e9caca560200010035e9843216ec6983eb7a6a3e8f804b7cce39af42546e613d08c02a513ec35207000000ddfac73301bb1db5bd"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:47 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:47 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:47 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:47 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) 09:22:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:48 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xdff4, 0x0, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1517.237456][ T27] audit: type=1804 audit(1564478567.951:2252): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=17151 res=1 09:22:48 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:48 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1517.340898][ T27] audit: type=1800 audit(1564478567.991:2253): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17151 res=0 09:22:48 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:48 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xdff4, 0x0, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:48 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) [ 1517.618097][ T27] audit: type=1804 audit(1564478568.331:2254): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=17153 res=1 09:22:48 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:48 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) [ 1517.775415][ T27] audit: type=1800 audit(1564478568.341:2255): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17153 res=0 09:22:48 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:48 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:48 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xdff4, 0x0, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) [ 1517.956179][ T27] audit: type=1804 audit(1564478568.671:2256): pid=7954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=17159 res=1 09:22:48 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[], 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) [ 1518.064631][ T27] audit: type=1800 audit(1564478568.721:2257): pid=7954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17159 res=0 09:22:48 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:48 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:48 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) 09:22:49 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[], 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:49 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x0, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:49 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:49 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:49 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:49 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:49 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x0, 0x0, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:49 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) 09:22:49 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:49 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:49 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:49 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:50 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[], 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:50 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x0, 0x0, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:50 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:50 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) socket$inet_udplite(0x2, 0x2, 0x88) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) 09:22:50 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:50 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:50 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x0, 0x0, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:50 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) 09:22:50 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:50 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:50 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:50 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:50 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:50 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) 09:22:50 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:50 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:50 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:51 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:51 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:51 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:51 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:51 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) 09:22:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:51 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d656e675e6500000000000000000000ff071b526bb5957004f38e00000000000000000000001f00000006000000a005000058022678344fdf80a3306e074fd9ab0d8dd0d93c7d71c54c000300e20000004000b004000000e8056ffad87bb2688ff7853e1077fb8797a2cf0000e8070000e805000100"], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:51 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) 09:22:52 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x0, 0x5, 0x924, 0x0, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:52 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) 09:22:52 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}], 0x1, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) [ 1521.562278][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 1521.562290][ T27] audit: type=1804 audit(1564478572.281:2286): pid=8681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=17197 res=1 09:22:52 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) 09:22:52 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x0, 0x5, 0x924, 0x0, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:52 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1521.719043][ T27] audit: type=1804 audit(1564478572.301:2287): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir034701233/syzkaller.bA8xpA/4240/memory.events" dev="sda1" ino=17196 res=1 09:22:52 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='+pids\x00+memory /me\x00\x00r'], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0}, 0xfeca) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {0x0}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(&(0x7f00000004c0)={0x100000, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x93e, 0x0, 0x3, 0x43f, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1521.865294][ T27] audit: type=1800 audit(1564478572.301:2288): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=17196 res=0 09:22:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) [ 1522.021391][ T27] audit: type=1800 audit(1564478572.321:2289): pid=8681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17197 res=0 09:22:52 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/.yz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x7fffffff, 0x800, 0x0, 0x93e, 0x0, 0x0, 0x43f, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xdff4, 0xffffffffffffffff, 0x0, 0x5, 0x924, 0x0, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x8, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x9, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 09:22:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, 0x0) [ 1522.178476][ T27] audit: type=1800 audit(1564478572.671:2290): pid=8798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=17176 res=0 09:22:52 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x48) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltgid'}}]}}) [ 1522.305200][ T27] audit: type=1804 audit(1564478572.931:2291): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=17193 res=1 09:22:53 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x203}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 1522.338733][ T27] audit: type=1800 audit(1564478572.941:2292): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17193 res=0 [ 1522.395580][ T27] audit: type=1804 audit(1564478573.111:2293): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir034701233/syzkaller.bA8xpA/4242/memory.events" dev="sda1" ino=17182 res=1 [ 1522.450598][ T27] audit: type=1800 audit(1564478573.111:2294): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=17182 res=0 [ 1522.630715][ T27] audit: type=1804 audit(1564478573.351:2295): pid=8917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="memory.events" dev="sda1" ino=16519 res=1 [ 1683.657685][ T1057] INFO: task syz-executor.1:10347 blocked for more than 143 seconds. [ 1683.665838][ T1057] Not tainted 5.3.0-rc2+ #82 [ 1683.673927][ T1057] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1683.683134][ T1057] syz-executor.1 D24544 10347 1 0x00000004 [ 1683.692073][ T1057] Call Trace: [ 1683.695399][ T1057] __schedule+0x755/0x1580 [ 1683.699975][ T1057] ? __sched_text_start+0x8/0x8 [ 1683.704846][ T1057] ? rwlock_bug.part.0+0x90/0x90 [ 1683.712511][ T1057] ? rwsem_down_write_slowpath+0x27d/0xf60 [ 1683.718471][ T1057] schedule+0xa8/0x270 [ 1683.722620][ T1057] rwsem_down_write_slowpath+0x708/0xf60 [ 1683.730839][ T1057] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1683.737102][ T1057] ? downgrade_write+0x3c0/0x3c0 [ 1683.742304][ T1057] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1683.751306][ T1057] ? mark_held_locks+0xf0/0xf0 [ 1683.756101][ T1057] ? lock_acquire+0x190/0x410 [ 1683.760929][ T1057] ? vfs_unlink+0xd5/0x620 [ 1683.765363][ T1057] down_write+0x13c/0x150 [ 1683.772252][ T1057] ? down_write+0x13c/0x150 [ 1683.776813][ T1057] ? __down_timeout+0x2d0/0x2d0 [ 1683.781869][ T1057] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1683.790779][ T1057] ? may_delete+0x417/0x5f0 [ 1683.795307][ T1057] vfs_unlink+0xd5/0x620 [ 1683.800003][ T1057] do_unlinkat+0x3f7/0x6d0 [ 1683.805161][ T1057] ? __ia32_sys_rmdir+0x40/0x40 [ 1683.816769][ T1057] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1683.823554][ T1057] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1683.832473][ T1057] ? getname_flags+0x277/0x5b0 [ 1683.837279][ T1057] __x64_sys_unlink+0x42/0x50 [ 1683.842154][ T1057] do_syscall_64+0xfd/0x6a0 [ 1683.846692][ T1057] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1683.855134][ T1057] RIP: 0033:0x459577 [ 1683.859208][ T1057] Code: Bad RIP value. [ 1683.863278][ T1057] RSP: 002b:00007ffe852b2998 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1683.874229][ T1057] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459577 [ 1683.882551][ T1057] RDX: 00007ffe852b29b0 RSI: 00007ffe852b29b0 RDI: 00007ffe852b2a40 [ 1683.893252][ T1057] RBP: 000000000000241c R08: 0000000000000000 R09: 000000000000000c [ 1683.901440][ T1057] R10: 0000000000000005 R11: 0000000000000246 R12: 00007ffe852b3ad0 [ 1683.912008][ T1057] R13: 00005555568c9940 R14: 0000000000000000 R15: 00007ffe852b3ad0 [ 1683.920280][ T1057] INFO: lockdep is turned off. [ 1683.925051][ T1057] NMI backtrace for cpu 0 [ 1683.929476][ T1057] CPU: 0 PID: 1057 Comm: khungtaskd Not tainted 5.3.0-rc2+ #82 [ 1683.937015][ T1057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1683.947065][ T1057] Call Trace: [ 1683.950361][ T1057] dump_stack+0x172/0x1f0 [ 1683.954691][ T1057] nmi_cpu_backtrace.cold+0x70/0xb2 [ 1683.959902][ T1057] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1683.966142][ T1057] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 1683.971783][ T1057] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 1683.977763][ T1057] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1683.983654][ T1057] watchdog+0x9d0/0xef0 [ 1683.987820][ T1057] kthread+0x361/0x430 [ 1683.991885][ T1057] ? reset_hung_task_detector+0x30/0x30 [ 1683.997515][ T1057] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1684.003753][ T1057] ret_from_fork+0x24/0x30 [ 1684.008421][ T1057] Sending NMI from CPU 0 to CPUs 1: [ 1684.014023][ C1] NMI backtrace for cpu 1 [ 1684.014029][ C1] CPU: 1 PID: 3905 Comm: udevd Not tainted 5.3.0-rc2+ #82 [ 1684.014034][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1684.014037][ C1] RIP: 0010:check_memory_region+0x180/0x1a0 [ 1684.014047][ C1] Code: c1 41 83 e1 07 49 29 c1 74 a4 4c 89 c0 4f 8d 04 08 eb 09 48 83 c0 01 4c 39 c0 74 92 80 38 00 74 f2 e9 3a ff ff ff 4d 0f be 02 <41> 83 e3 07 b8 01 00 00 00 4d 39 c3 0f 8c 31 ff ff ff eb 9b 49 89 [ 1684.014050][ C1] RSP: 0018:ffff888092a8fb18 EFLAGS: 00000046 [ 1684.014057][ C1] RAX: 0000000000000001 RBX: ffffed1012551f6f RCX: ffffffff8159e5f4 [ 1684.014061][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888092a8fb70 [ 1684.014066][ C1] RBP: ffff888092a8fb30 R08: 0000000000000004 R09: ffffed1012551f6f [ 1684.014070][ C1] R10: ffffed1012551f6e R11: ffff888092a8fb73 R12: ffffed1012551f6e [ 1684.014074][ C1] R13: 1ffff11012551f6a R14: ffff8880922f6df0 R15: ffff888092a8fbb0 [ 1684.014079][ C1] FS: 00007f3a2f1a67a0(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1684.014082][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1684.014087][ C1] CR2: ffffffffff600400 CR3: 00000000928f2000 CR4: 00000000001406e0 [ 1684.014091][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1684.014095][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1684.014097][ C1] Call Trace: [ 1684.014100][ C1] __kasan_check_write+0x14/0x20 [ 1684.014103][ C1] do_raw_write_lock+0x124/0x290 [ 1684.014106][ C1] ? do_raw_read_unlock+0x70/0x70 [ 1684.014109][ C1] ? lock_acquire+0x190/0x410 [ 1684.014112][ C1] ? ep_scan_ready_list+0x313/0xb20 [ 1684.014115][ C1] ? ep_insert+0x1880/0x1880 [ 1684.014118][ C1] _raw_write_lock_irq+0x68/0x80 [ 1684.014121][ C1] ? ep_scan_ready_list+0x313/0xb20 [ 1684.014124][ C1] ep_scan_ready_list+0x313/0xb20 [ 1684.014128][ C1] ? ep_unregister_pollwait.isra.0+0x3d0/0x3d0 [ 1684.014130][ C1] ep_poll+0x1f9/0xe60 [ 1684.014133][ C1] ? ep_modify+0x8e0/0x8e0 [ 1684.014136][ C1] ? down_read_non_owner+0x450/0x450 [ 1684.014139][ C1] ? task_work_run+0x118/0x1c0 [ 1684.014142][ C1] ? __kasan_check_read+0x11/0x20 [ 1684.014145][ C1] ? __kasan_check_write+0x14/0x20 [ 1684.014149][ C1] ? blkcg_maybe_throttle_current+0x5fe/0x1030 [ 1684.014152][ C1] ? task_work_run+0x63/0x1c0 [ 1684.014155][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1684.014158][ C1] ? __fget_light+0x1a9/0x230 [ 1684.014161][ C1] do_epoll_wait+0x210/0x260 [ 1684.014164][ C1] __x64_sys_epoll_wait+0x97/0xf0 [ 1684.014167][ C1] do_syscall_64+0xfd/0x6a0 [ 1684.014170][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1684.014173][ C1] RIP: 0033:0x7f3a2e8ba943 [ 1684.014182][ C1] Code: 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 83 3d b5 dc 2a 00 00 75 13 49 89 ca b8 e8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 3b c4 00 00 48 89 04 24 [ 1684.014185][ C1] RSP: 002b:00007ffcf7249d78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 1684.014209][ C1] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f3a2e8ba943 [ 1684.014214][ C1] RDX: 0000000000000008 RSI: 00007ffcf7249e70 RDI: 000000000000000a [ 1684.014218][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1684.014222][ C1] R10: 0000000000000bb8 R11: 0000000000000246 R12: 0000000000000003 [ 1684.014227][ C1] R13: 0000000000000000 R14: 0000000001469510 R15: 000000000142e030 [ 1684.015825][ T1057] Kernel panic - not syncing: hung_task: blocked tasks [ 1684.350817][ T1057] CPU: 0 PID: 1057 Comm: khungtaskd Not tainted 5.3.0-rc2+ #82 [ 1684.358360][ T1057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1684.368429][ T1057] Call Trace: [ 1684.371731][ T1057] dump_stack+0x172/0x1f0 [ 1684.376059][ T1057] panic+0x2dc/0x755 [ 1684.379965][ T1057] ? add_taint.cold+0x16/0x16 [ 1684.384644][ T1057] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 1684.390632][ T1057] ? ___preempt_schedule+0x16/0x20 [ 1684.395747][ T1057] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 1684.401905][ T1057] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 1684.408056][ T1057] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 1684.414300][ T1057] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 1684.420499][ T1057] watchdog+0x9e1/0xef0 [ 1684.424674][ T1057] kthread+0x361/0x430 [ 1684.428754][ T1057] ? reset_hung_task_detector+0x30/0x30 [ 1684.434300][ T1057] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1684.440564][ T1057] ret_from_fork+0x24/0x30 [ 1684.446276][ T1057] Kernel Offset: disabled [ 1684.450601][ T1057] Rebooting in 86400 seconds..